Phishing Pages Delivered Through Refresh HTTP Response Header
Tags
country: Japan
maec-delivery-vectors: Watering Hole
attack-pattern: Direct Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Email Addresses - T1589.002 Javascript - T1059.007 Malicious Link - T1204.001 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004
Show in Graph
Common Information
Type Value
UUID 159a336f-e16a-4c5a-b560-b551e6f000ed
Fingerprint ae84899b8905bec5
Analysis status DONE
Considered CTI value 0
Text language
Published Sept. 11, 2024, 10 a.m.
Added to db Sept. 11, 2024, 12:32 p.m.
Last updated Dec. 23, 2024, 1:12 p.m.
Headline Phishing Pages Delivered Through Refresh HTTP Response Header
Title Phishing Pages Delivered Through Refresh HTTP Response Header
Detected Hints/Tags/Attributes 56/3/25
Source URLs
Redirection Url
Details Source https://unit42.paloaltonetworks.com/rare-phishing-page-delivery-header-refresh/
URL Provider
Details Provider Source level domain
Details paloaltonetworks.com unit42.paloaltonetworks.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 256 ✔ Unit 42 https://unit42.paloaltonetworks.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
hk6.8ik8rq.ru
Details Domain 1 
impactchd.in
Details Domain 1 
businessimageprint.com
Details Domain 7 
docusign.com
Details Domain 1 
onelink.me
Details Domain 1 
go.link
Details Domain 2 
speedpython.com
Details Domain 1 
club-os.com
Details Domain 2 
guide-orientation.tn
Details Domain 1 
cices.org
Details Domain 1 
dominicanmidia.com
Details Domain 1 
sirius-maritime.com
Details Domain 24 
office.com
Details Email 1 
2127394249@businessimageprint.com
Details Email 1 
2127394249@docusign.com
Details IPv4 1 
195.19.93.5
Details Url 1 
http://impactchd.in/content/bing/ghjkj/1kdeyl61ahaub
Details Url 1 
https://hk6.8ik8rq.ru/hk6/#[recipient
Details Url 1 
https://www.cices.org/?wptouch_switch=desktop&redirect=https://dominicanmidia.com//zres/rezs/obld/
Details Url 1 
https://dominicanmidia.com//zres/rezs/obld/
Details Url 1 
https://sirius-maritime.com/0utl0ok/?email=[recipient
Details Url 1 
https://www.cices.org/?wptouch_switch=desktop&redirect=https://dominicanmidia.com//zres/rezs/dnne/
Details Url 1 
https://dominicanmidia.com//zres/rezs/dnne/
Details Url 1 
https://www.cices.org/?wptouch_switch=desktop&redirect=https://dominicanmidia.com//zres/rezs/crej/
Details Url 1 
https://dominicanmidia.com//zres/rezs/crej//zres/rezs/crej/