{"id": "RST:853709B0-027B-3578-ACF0-56A4E470F756", "bulletinFamily": "ioc", "title": "RST Threat feed. IOC: snnbcwebs.oerujdmasmcvnsd6fdgfd1a.xyz/pc/index.php?key=a@b.c&openid.assoc_handle=jpflex&openid.claimed_id=specs.openid.net/auth/2.0/identifier_select&openid.identity=specs.openid.net/auth/2.0/identifier_select&openid.mode=checkid_setup&openid.ns=specs.openid.net/auth/2.0&openid.pape.max_auth_age=0&openid.return_to=www.smbc.co.jp/?ref_%3dnav_em_hd_re_signin&ref_=nav_em_hd_clc_signinwww.smbc.co.jp", "description": "Found **snnbcwebs[.]oerujdmasmcvnsd6fdgfd1a.xyz/pc/index.php?key=a@b.c&openid.assoc_handle=jpflex&openid.claimed_id=specs.openid.net/auth/2.0/identifier_select&openid.identity=specs.openid.net/auth/2.0/identifier_select&openid.mode=checkid_setup&openid.ns=specs.openid.net/auth/2.0&openid.pape.max_auth_age=0&openid.return_to=www.smbc.co.jp/?ref_%3dnav_em_hd_re_signin&ref_=nav_em_hd_clc_signinwww.smbc.co.jp** in [RST Threat Feed](https://rstcloud.net/profeed) with score **62**.\n First seen: 2020-10-08T03:00:00, Last seen: 2020-10-10T03:00:00.\n IOC tags: **phishing**.\n[https://rstcloud.net/](https://rstcloud.net/)", "published": "2020-10-11T00:00:00", "modified": "2020-10-08T00:00:00", "cvss": {}, "href": "", "reporter": "RST Threat Feed", "references": [], "cvelist": [], "type": "rst", "lastseen": "2020-10-10T00:00:00", "edition": 1, "viewCount": 0, "enchantments": {"vulnersScore": "PENDING"}, "iocType": "url", "ip": [], "domain": ["snnbcwebs.oerujdmasmcvnsd6fdgfd1a.xyz"], "url": ["snnbcwebs.oerujdmasmcvnsd6fdgfd1a.xyz/pc/index.php?key=a@b.c&openid.assoc_handle=jpflex&openid.claimed_id=specs.openid.net/auth/2.0/identifier_select&openid.identity=specs.openid.net/auth/2.0/identifier_select&openid.mode=checkid_setup&openid.ns=specs.openid.net/auth/2.0&openid.pape.max_auth_age=0&openid.return_to=www.smbc.co.jp/?ref_%3dnav_em_hd_re_signin&ref_=nav_em_hd_clc_signinwww.smbc.co.jp"], "iocScore": {"ioc_frequency": 0.96, "ioc_src": 75.98, "ioc_tags": 0.86, "ioc_total": 62.0}, "tags": ["phishing"], "fp": {"alarm": "false", "descr": ""}, "whois": {}, "geodata": {}, "asn": {}}

{}