216.73.217.80

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:48 · Modified 21/12/2025 08:11

Essential information

Value / Name
http://system23cfb9.link.bmesend.com/api/LinkHandler/getaction2?redirectParam2=K09weU5vMDBKWXFUK0ZPdkw4azdKWHk5QlJsZkNXWXlLMUxiMHdXQU1YK3FFZGFsZG9ZQ2ZqNUdHd3ErZEpLeGpyeVE1U1hmU2xoSy9WemJySVEzQytGajZBVWE4em5jaEpuRHhEa05xOTZOcWxQRVdUN1g2S2ViR3YvZjN1K2dJZk9rQTRVajZmMD0%3d
Confidence
100/100
Revoked
Yes
Valid from
03/12/2024 17:39
Valid until
19/01/2025 17:39
Pattern type
stix
Published
20/12/2025 19:48
Modified
21/12/2025 08:11
Author / Source
AlienVault

Description

No description.

Pattern

[url:value = 'http://system23cfb9.link.bmesend.com/api/LinkHandler/getaction2?redirectParam2=K09weU5vMDBKWXFUK0ZPdkw4azdKWHk5QlJsZkNXWXlLMUxiMHdXQU1YK3FFZGFsZG9ZQ2ZqNUdHd3ErZEpLeGpyeVE1U1hmU2xoSy9WemJySVEzQytGajZBVWE4em5jaEpuRHhEa05xOTZOcWxQRVdUN1g2S2ViR3YvZjN1K2dJZk9rQTRVajZmMD0%3d']

Labels / Tags

Labels: aitm dadsec microsoft 365 phishing-as-a-service rockstar 2fa

Marking (TLP)

TLP:CLEAR