Investigating an Attack Against Recorded Future in Real Time
Tags
| country: | Philippines |
| attack-pattern: | Data Direct Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Server - T1583.004 Server - T1584.004 Whois - T1596.002 |
Common Information
| Type | Value |
|---|---|
| UUID | 957838ff-4e85-457e-b7cb-42da1150ea50 |
| Fingerprint | 38ca0d70803b6e1 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | June 6, 2019, midnight |
| Added to db | Feb. 17, 2023, 10:21 p.m. |
| Last updated | Nov. 17, 2024, 6:30 p.m. |
| Headline | Investigating an Attack Against Recorded Future in Real Time |
| Title | Investigating an Attack Against Recorded Future in Real Time |
| Detected Hints/Tags/Attributes | 43/2/24 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 2 | recorded-future.com |
|
| Details | Domain | 1 | whois.directnic.com |
|
| Details | Domain | 1 | www.directnic.com |
|
| Details | Domain | 2 | directnic.com |
|
| Details | Domain | 27 | www.icann.org |
|
| Details | Domain | 1 | directnicwhoiscompliance.com |
|
| Details | Domain | 1 | ns1.thcservers.com |
|
| Details | Domain | 1 | ns2.thcservers.com |
|
| Details | Domain | 2 | gmallll.com |
|
| Details | Domain | 2 | paypal.com-secures.ga |
|
| Details | Domain | 2 | salariumphp.com |
|
| Details | Domain | 1 | autodiscover.recorded-future.com |
|
| Details | Domain | 2 | autodiscover.salariumphp.com |
|
| Details | Domain | 2 | autodiscover.gmallll.com |
|
| Details | 1 | abuse@directnic.com |
||
| Details | 1 | recorded-future.com-registrant@directnicwhoiscompliance.com |
||
| Details | 1 | recorded-future.com-admin@directnicwhoiscompliance.com |
||
| Details | 1 | recorded-future.com-tech@directnicwhoiscompliance.com |
||
| Details | IPv4 | 2 | 149.56.251.106 |
|
| Details | Url | 1 | http://www.directnic.com |
|
| Details | Url | 3 | https://www.icann.org/epp#clientdeleteprohibited |
|
| Details | Url | 5 | https://www.icann.org/epp#clienttransferprohibited |
|
| Details | Url | 3 | https://www.icann.org/epp#clientupdateprohibited |
|
| Details | Url | 1 | https://www.icann.org/epp#addperiod |