ID RST:C18862CA-15A5-3E8A-8C30-FF97CD1790CA
Type rst
Reporter RST Threat Feed
Modified 2020-12-04T00:00:00
Description
Found pochtarefund-xeq6nd[.]aakoa.xyz/index.php/false/false/py1n.html/discovercard.com/dfs/accounthome/summary/-www.schwab.com/secure.accurint.com/unfcu2.org/login1/wachovia.com/myaccounts.aspx/investing.schwab.com/secure/schwab/https:/step1.html in RST Threat Feed with score 60 .
First seen: 2020-12-04T03:00:00, Last seen: 2020-12-05T03:00:00.
IOC tags: phishing .
https://rstcloud.net/
{"id": "RST:C18862CA-15A5-3E8A-8C30-FF97CD1790CA", "bulletinFamily": "ioc", "title": "RST Threat feed. IOC: pochtarefund-xeq6nd.aakoa.xyz/index.php/false/false/py1n.html/discovercard.com/dfs/accounthome/summary/-www.schwab.com/secure.accurint.com/unfcu2.org/login1/wachovia.com/myaccounts.aspx/investing.schwab.com/secure/schwab/https:/step1.html", "description": "Found **pochtarefund-xeq6nd[.]aakoa.xyz/index.php/false/false/py1n.html/discovercard.com/dfs/accounthome/summary/-www.schwab.com/secure.accurint.com/unfcu2.org/login1/wachovia.com/myaccounts.aspx/investing.schwab.com/secure/schwab/https:/step1.html** in [RST Threat Feed](https://rstcloud.net/profeed) with score **60**.\n First seen: 2020-12-04T03:00:00, Last seen: 2020-12-05T03:00:00.\n IOC tags: **phishing**.\n[https://rstcloud.net/](https://rstcloud.net/)", "published": "2020-12-06T00:00:00", "modified": "2020-12-04T00:00:00", "cvss": {}, "href": "", "reporter": "RST Threat Feed", "references": [], "cvelist": [], "type": "rst", "lastseen": "2020-12-05T00:00:00", "edition": 1, "viewCount": 0, "enchantments": {"vulnersScore": "PENDING"}, "iocType": "url", "ip": [], "domain": ["pochtarefund-xeq6nd.aakoa.xyz"], "url": ["pochtarefund-xeq6nd.aakoa.xyz/index.php/false/false/py1n.html/discovercard.com/dfs/accounthome/summary/-www.schwab.com/secure.accurint.com/unfcu2.org/login1/wachovia.com/myaccounts.aspx/investing.schwab.com/secure/schwab/https:/step1.html"], "iocScore": {"ioc_frequency": 0.98, "ioc_src": 74.99, "ioc_tags": 0.83, "ioc_total": 60.0}, "tags": ["phishing"], "fp": {"alarm": "false", "descr": ""}, "whois": {}, "geodata": {}, "asn": {}, "threat": []}
{}