The Return of The Charming Kitten - Certfa Lab
Tags
country: Netherlands France Iran
maec-delivery-vectors: Watering Hole
attack-pattern: Data Direct Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Email Accounts - T1585.002 Email Accounts - T1586.002 Email Addresses - T1589.002 Ip Addresses - T1590.005 Phishing - T1660 Phishing - T1566 Social Media - T1593.001
Show in Graph
Common Information
Type Value
UUID f17aa1fc-5ff0-4321-bb14-cbc5f6f77368
Fingerprint aca109930850e6c5
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 13, 2018, midnight
Added to db Sept. 26, 2022, 9:33 a.m.
Last updated Nov. 20, 2024, 2:48 a.m.
Headline The Return of The Charming Kitten
Title The Return of The Charming Kitten - Certfa Lab
Detected Hints/Tags/Attributes 76/3/104
Source URLs
Redirection Url
Details Source https://blog.certfa.com/posts/the-return-of-the-charming-kitten/
URL Provider
Details Provider Source level domain
Details certfa.com blog.certfa.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
support.services
Details Domain 1 
accounts-support.services
Details Domain 1182 
gmail.com
Details Domain 2 
email-delivery.info
Details Domain 43 
sites.google.com
Details Domain 709 
google.com
Details Domain 2 
site.google.com
Details Domain 2 
broadcast-news.info
Details Domain 5 
broadcastnews.pro
Details Domain 2 
com-identifier-servicelog.info
Details Domain 2 
com-identifier-servicelog.name
Details Domain 1 
com-identifier-userservicelog.com
Details Domain 1 
confirm-session-identification.info
Details Domain 2 
confirm-session-identifier.info
Details Domain 1 
confirmation-service.info
Details Domain 2 
customer-recovery.info
Details Domain 2 
customize-identity.info
Details Domain 1 
document-share.info
Details Domain 1 
document.support-recoverycustomers.services
Details Domain 2 
documentofficupdate.info
Details Domain 1 
documents.accounts-support.services
Details Domain 3 
documentsfilesharing.cloud
Details Domain 1 
mobile-sessionid.customize-identity.info
Details Domain 1 
mobiles-sessionid.customize-identity.info
Details Domain 1 
my-scribdinc.online
Details Domain 1 
myyahoo.ddns.net
Details Domain 2 
notificationapp.info
Details Domain 1 
onlinemessenger.com-identifier-servicelog.name
Details Domain 1 
podcastmedia.online
Details Domain 2 
recoveryusercustomer.info
Details Domain 2 
session-management.info
Details Domain 1 
support-recoverycustomers.services
Details Domain 2 
continue-session-identifier.info
Details Domain 3 
mobilecontinue.network
Details Domain 1 
session-identifier-webservice.mobilecontinue.network
Details Domain 2 
com-messengersaccount.name
Details Domain 2 
invitation-to-messenger.space
Details Domain 2 
confirm-identification.name
Details Domain 1 
mobile.confirm-identification.name
Details Domain 1 
services.confirm-identification.name
Details Domain 4 
mobile-messengerplus.network
Details Domain 1 
confirm.mobile-messengerplus.network
Details Domain 1 
com-messengercenters.name
Details Domain 1 
securemail.mobile-messengerplus.network
Details Domain 1 
documents.mobile-messengerplus.network
Details Domain 1 
confirm-identity.net
Details Domain 1 
identifier-sessions-mailactivityid.site
Details Domain 1 
activatecodeoption.ddns.net
Details Domain 1 
broadcastpopuer.ddns.net
Details Domain 1 
books.com-identifier-servicelog.name
Details Domain 1 
mb.sessions-identifier-memberemailid.network
Details Domain 3 
sessions-identifier-memberemailid.network
Details Domain 1 
sessions.mobile-messengerplus.network
Details Domain 2 
confirm-verification-process.systems
Details Domain 1 
accounts.confirm-verification-process.systems
Details Domain 1 
broadcastnews.ddns.net
Details Domain 2 
account-profile-users.info
Details Domain 1 
us2-mail-login-profile.site
Details Domain 1 
us2.login-users-account.site
Details Domain 1 
login-users-account.site
Details Domain 1 
live.account-profile-users.info
Details Domain 1 
signin.account-profile-users.info
Details Domain 1 
aol.account-profile-users.info
Details Domain 1 
users-account.site
Details Domain 2 
certfa.com
Details Domain 1 
screenshots.firefox.com
Details Domain 46 
support.google.com
Details Email 1 
notifications.mailservices@gmail.com
Details Email 1 
noreply.customermails@gmail.com
Details File 1 
us2.log
Details File 3 
s.cer
Details IPv4 1 
89.198.179.103
Details IPv4 1 
31.2.213.18
Details IPv4 1 
178.162.132.65
Details IPv4 1 
190.2.154.34
Details IPv4 1 
190.2.154.35
Details IPv4 1 
190.2.154.36
Details IPv4 2 
190.2.154.38
Details IPv4 1 
46.166.151.211
Details IPv4 1 
51.38.87.64
Details IPv4 1 
51.38.87.65
Details IPv4 1 
51.68.185.96
Details IPv4 1 
51.38.107.113
Details IPv4 1 
95.211.189.45
Details IPv4 1 
95.211.189.46
Details IPv4 1 
95.211.189.47
Details IPv4 1 
213.227.139.148
Details IPv4 1 
54.37.241.221
Details IPv4 1 
54.38.144.250
Details IPv4 1 
54.38.144.251
Details IPv4 1 
54.38.144.252
Details IPv4 1 
85.17.127.172
Details IPv4 1 
85.17.127.173
Details IPv4 1 
85.17.127.174
Details IPv4 1 
85.17.127.175
Details Url 1 
https://sites.google.com/view/sharingdrivesystem
Details Url 1 
https://s.certfa.com/q1514c
Details Url 1 
https://s.certfa.com/ennnag
Details Url 1 
https://s.certfa.com/ur93p2
Details Url 1 
https://s.certfa.com/1ulixk
Details Url 4 
https://sites.google.com
Details Url 1 
https://screenshots.firefox.com
Details Url 1 
https://s.certfa.com/ogqusc
Details Url 1 
https://support.google.com/a/answer/2640542?hl=en