Ruleset Update Summary - 2024/12/03 - v10783

Ruleset Updates
1

Summary:

0 new OPEN, 0 new PRO (0 + 0)

Modified inactive rules:

  • 2035346 - ET PHISHING Suspected TA445 Spearphishing Related Domain (bigmir .space in TLS SNI) (phishing.rules)
  • 2035347 - ET PHISHING Suspected TA445 Spearphishing Related Domain (mod-mil .site in TLS SNI) (phishing.rules)
  • 2035348 - ET PHISHING Suspected TA445 Spearphishing Related Domain (mirrohost .space in TLS SNI) (phishing.rules)
  • 2043176 - ET PHISHING Office 365 Credential Harvesting Domain (rightofcourse .com) in TLS SNI (phishing.rules)
  • 2047479 - ET PHISHING Observed TOAD Domain (mshelp53 .us in TLS SNI) (phishing.rules)
  • 2047480 - ET PHISHING Observed TOAD Domain (cashapphelp06 .us in TLS SNI) (phishing.rules)
  • 2047481 - ET PHISHING Observed TOAD Domain (pcxhelp .us in TLS SNI) (phishing.rules)
  • 2047482 - ET PHISHING Observed TOAD Domain (hpsupport08 .us in TLS SNI) (phishing.rules)
  • 2047483 - ET PHISHING Observed TOAD Domain (ppalsecure .us in TLS SNI) (phishing.rules)
  • 2047484 - ET PHISHING Observed TOAD Domain (cashapphelp011 .us in TLS SNI) (phishing.rules)
  • 2047485 - ET PHISHING Observed TOAD Domain (mshelp2 .us in TLS SNI) (phishing.rules)
  • 2047486 - ET PHISHING Observed TOAD Domain (apples9 .us in TLS SNI) (phishing.rules)
  • 2047487 - ET PHISHING Observed TOAD Domain (cashapphelp101 .us in TLS SNI) (phishing.rules)
  • 2047488 - ET PHISHING Observed TOAD Domain (mshelp51 .us in TLS SNI) (phishing.rules)
  • 2047489 - ET PHISHING Observed TOAD Domain (cashapp04 .us in TLS SNI) (phishing.rules)
  • 2047490 - ET PHISHING Observed TOAD Domain (mshelp03 .us in TLS SNI) (phishing.rules)
  • 2047491 - ET PHISHING Observed TOAD Domain (help88 .us in TLS SNI) (phishing.rules)
  • 2047493 - ET PHISHING Observed TOAD Domain (mshelp09 .us in TLS SNI) (phishing.rules)
  • 2047494 - ET PHISHING Observed TOAD Domain (mshelp013 .us in TLS SNI) (phishing.rules)
  • 2047495 - ET PHISHING Observed TOAD Domain (mshelp52 .us in TLS SNI) (phishing.rules)
  • 2047496 - ET PHISHING Observed TOAD Domain (mshelp6 .us in TLS SNI) (phishing.rules)
  • 2047497 - ET PHISHING Observed TOAD Domain (cashapphelp010 .us in TLS SNI) (phishing.rules)
  • 2047498 - ET PHISHING Observed TOAD Domain (mshelp01 .us in TLS SNI) (phishing.rules)
  • 2047499 - ET PHISHING Observed TOAD Domain (cashapp05 .us in TLS SNI) (phishing.rules)
  • 2047500 - ET PHISHING Observed TOAD Domain (cshelp12 .us in TLS SNI) (phishing.rules)
  • 2047501 - ET PHISHING Observed TOAD Domain (cashapphelp103 .us in TLS SNI) (phishing.rules)
  • 2047502 - ET PHISHING Observed TOAD Domain (hpsupport02 .us in TLS SNI) (phishing.rules)
  • 2047503 - ET PHISHING Observed TOAD Domain (cshelp09 .us in TLS SNI) (phishing.rules)
  • 2047504 - ET PHISHING Observed TOAD Domain (quickcare .cc in TLS SNI) (phishing.rules)
  • 2047505 - ET PHISHING Observed TOAD Domain (cashapphelp08 .us in TLS SNI) (phishing.rules)
  • 2047506 - ET PHISHING Observed TOAD Domain (apples12 .us in TLS SNI) (phishing.rules)
  • 2047507 - ET PHISHING Observed TOAD Domain (mshelp08 .us in TLS SNI) (phishing.rules)
  • 2047508 - ET PHISHING Observed TOAD Domain (pcdelta .us in TLS SNI) (phishing.rules)
  • 2047509 - ET PHISHING Observed TOAD Domain (mshelp14 .us in TLS SNI) (phishing.rules)
  • 2047510 - ET PHISHING Observed TOAD Domain (cashapphelp05 .us in TLS SNI) (phishing.rules)
  • 2047511 - ET PHISHING Observed TOAD Domain (help81 .us in TLS SNI) (phishing.rules)
  • 2047512 - ET PHISHING Observed TOAD Domain (mscare .cc in TLS SNI) (phishing.rules)
  • 2047513 - ET PHISHING Observed TOAD Domain (pcjet .us in TLS SNI) (phishing.rules)
  • 2047514 - ET PHISHING Observed TOAD Domain (mshelp05 .us in TLS SNI) (phishing.rules)
  • 2047515 - ET PHISHING Observed TOAD Domain (hpsupport03 .us in TLS SNI) (phishing.rules)
  • 2047516 - ET PHISHING Observed TOAD Domain (apples10 .us in TLS SNI) (phishing.rules)
  • 2047517 - ET PHISHING Observed TOAD Domain (cshelp10 .us in TLS SNI) (phishing.rules)
  • 2047518 - ET PHISHING Observed TOAD Domain (jcb24 .us in TLS SNI) (phishing.rules)
  • 2047519 - ET PHISHING Observed TOAD Domain (mshelp02 .us in TLS SNI) (phishing.rules)
  • 2047520 - ET PHISHING Observed TOAD Domain (support24 .cc in TLS SNI) (phishing.rules)
  • 2047521 - ET PHISHING Observed TOAD Domain (help87 .us in TLS SNI) (phishing.rules)
  • 2047522 - ET PHISHING Observed TOAD Domain (apples8 .us in TLS SNI) (phishing.rules)
  • 2047523 - ET PHISHING Observed TOAD Domain (helpdesk24 .us in TLS SNI) (phishing.rules)
  • 2047524 - ET PHISHING Observed TOAD Domain (mshelp012 .us in TLS SNI) (phishing.rules)
  • 2047525 - ET PHISHING Observed TOAD Domain (pccharlie .us in TLS SNI) (phishing.rules)
  • 2047526 - ET PHISHING Observed TOAD Domain (cashapphelp102 .us in TLS SNI) (phishing.rules)
  • 2047527 - ET PHISHING Observed TOAD Domain (cshelp03 .us in TLS SNI) (phishing.rules)
  • 2047528 - ET PHISHING Observed TOAD Domain (apples6 .us in TLS SNI) (phishing.rules)
  • 2047529 - ET PHISHING Observed TOAD Domain (cshelp01 .us in TLS SNI) (phishing.rules)
  • 2047530 - ET PHISHING Observed TOAD Domain (cshelp06 .us in TLS SNI) (phishing.rules)
  • 2047531 - ET PHISHING Observed TOAD Domain (help89 .us in TLS SNI) (phishing.rules)
  • 2047532 - ET PHISHING Observed TOAD Domain (cashapphelp104 .us in TLS SNI) (phishing.rules)
  • 2047533 - ET PHISHING Observed TOAD Domain (cshelp08 .us in TLS SNI) (phishing.rules)
  • 2047534 - ET PHISHING Observed TOAD Domain (hpsupport09 .us in TLS SNI) (phishing.rules)
  • 2047535 - ET PHISHING Observed TOAD Domain (apples5 .us in TLS SNI) (phishing.rules)
  • 2047536 - ET PHISHING Observed TOAD Domain (cashapphelp105 .cc in TLS SNI) (phishing.rules)
  • 2047537 - ET PHISHING Observed TOAD Domain (cashapphelp01 .us in TLS SNI) (phishing.rules)
  • 2047538 - ET PHISHING Observed TOAD Domain (cashapphelp105 .us in TLS SNI) (phishing.rules)
  • 2047539 - ET PHISHING Observed TOAD Domain (mshelp8 .us in TLS SNI) (phishing.rules)
  • 2047540 - ET PHISHING Observed TOAD Domain (hpsupport07 .us in TLS SNI) (phishing.rules)
  • 2047541 - ET PHISHING Observed TOAD Domain (mshelp3 .us in TLS SNI) (phishing.rules)
  • 2047542 - ET PHISHING Observed TOAD Domain (apples14 .us in TLS SNI) (phishing.rules)
  • 2047543 - ET PHISHING Observed TOAD Domain (refundpvt .us in TLS SNI) (phishing.rules)
  • 2047544 - ET PHISHING Observed TOAD Domain (mshelp010 .us in TLS SNI) (phishing.rules)
  • 2047545 - ET PHISHING Observed TOAD Domain (mshelp15 .us in TLS SNI) (phishing.rules)
  • 2047546 - ET PHISHING Observed TOAD Domain (b124 .us in TLS SNI) (phishing.rules)
  • 2047547 - ET PHISHING Observed TOAD Domain (cashapp02 .us in TLS SNI) (phishing.rules)
  • 2047548 - ET PHISHING Observed TOAD Domain (securehelp .cc in TLS SNI) (phishing.rules)
  • 2047549 - ET PHISHING Observed TOAD Domain (mshelp12 .us in TLS SNI) (phishing.rules)
  • 2047550 - ET PHISHING Observed TOAD Domain (help84 .us in TLS SNI) (phishing.rules)
  • 2047551 - ET PHISHING Observed TOAD Domain (apples4 .us in TLS SNI) (phishing.rules)
  • 2047552 - ET PHISHING Observed TOAD Domain (cashapphelp03 .us in TLS SNI) (phishing.rules)
  • 2047553 - ET PHISHING Observed TOAD Domain (help86 .us in TLS SNI) (phishing.rules)
  • 2047554 - ET PHISHING Observed TOAD Domain (help90 .us in TLS SNI) (phishing.rules)
  • 2047555 - ET PHISHING Observed TOAD Domain (apples3 .us in TLS SNI) (phishing.rules)
  • 2047556 - ET PHISHING Observed TOAD Domain (apples11 .us in TLS SNI) (phishing.rules)
  • 2047557 - ET PHISHING Observed TOAD Domain (apples1 .us in TLS SNI) (phishing.rules)
  • 2047558 - ET PHISHING Observed TOAD Domain (cshelp13 .us in TLS SNI) (phishing.rules)
  • 2047559 - ET PHISHING Observed TOAD Domain (pcecho .us in TLS SNI) (phishing.rules)
  • 2047560 - ET PHISHING Observed TOAD Domain (nrtnhelp .us in TLS SNI) (phishing.rules)
  • 2047561 - ET PHISHING Observed TOAD Domain (cashapphelp02 .us in TLS SNI) (phishing.rules)
  • 2047562 - ET PHISHING Observed TOAD Domain (cshelp14 .us in TLS SNI) (phishing.rules)
  • 2047563 - ET PHISHING Observed TOAD Domain (apples13 .us in TLS SNI) (phishing.rules)
  • 2047564 - ET PHISHING Observed TOAD Domain (mshelp5 .us in TLS SNI) (phishing.rules)
  • 2047565 - ET PHISHING Observed TOAD Domain (pcbravo .us in TLS SNI) (phishing.rules)
  • 2047566 - ET PHISHING Observed TOAD Domain (mshelp .us in TLS SNI) (phishing.rules)
  • 2047567 - ET PHISHING Observed TOAD Domain (securenetwork .cc in TLS SNI) (phishing.rules)
  • 2047568 - ET PHISHING Observed TOAD Domain (mshelp015 .us in TLS SNI) (phishing.rules)
  • 2047569 - ET PHISHING Observed TOAD Domain (cshelp04 .us in TLS SNI) (phishing.rules)
  • 2047570 - ET PHISHING Observed TOAD Domain (jivajii .us in TLS SNI) (phishing.rules)
  • 2047571 - ET PHISHING Observed TOAD Domain (mshelp13 .us in TLS SNI) (phishing.rules)
  • 2047572 - ET PHISHING Observed TOAD Domain (pckilo .us in TLS SNI) (phishing.rules)
  • 2047573 - ET PHISHING Observed TOAD Domain (help82 .us in TLS SNI) (phishing.rules)
  • 2047574 - ET PHISHING Observed TOAD Domain (hpsupport01 .us in TLS SNI) (phishing.rules)
  • 2047575 - ET PHISHING Observed TOAD Domain (apples15 .us in TLS SNI) (phishing.rules)
  • 2047576 - ET PHISHING Observed TOAD Domain (mshelp1 .us in TLS SNI) (phishing.rules)
  • 2047577 - ET PHISHING Observed TOAD Domain (mshelp10 .us in TLS SNI) (phishing.rules)
  • 2047578 - ET PHISHING Observed TOAD Domain (cshelp05 .us in TLS SNI) (phishing.rules)
  • 2047579 - ET PHISHING Observed TOAD Domain (ncare360 .us in TLS SNI) (phishing.rules)
  • 2047580 - ET PHISHING Observed TOAD Domain (cashapp01 .us in TLS SNI) (phishing.rules)
  • 2047581 - ET PHISHING Observed TOAD Domain (mshelp11 .us in TLS SNI) (phishing.rules)
  • 2047582 - ET PHISHING Observed TOAD Domain (cashapp03 .us in TLS SNI) (phishing.rules)
  • 2047583 - ET PHISHING Observed TOAD Domain (hpsupport04 .us in TLS SNI) (phishing.rules)
  • 2047584 - ET PHISHING Observed TOAD Domain (cshelp11 .us in TLS SNI) (phishing.rules)
  • 2047585 - ET PHISHING Observed TOAD Domain (cashapphelp04 .us in TLS SNI) (phishing.rules)
  • 2047586 - ET PHISHING Observed TOAD Domain (cashapphelp07 .us in TLS SNI) (phishing.rules)
  • 2047587 - ET PHISHING Observed TOAD Domain (live855 .us in TLS SNI) (phishing.rules)
  • 2047588 - ET PHISHING Observed TOAD Domain (mshelp011 .us in TLS SNI) (phishing.rules)
  • 2047589 - ET PHISHING Observed TOAD Domain (mshelp4 .us in TLS SNI) (phishing.rules)
  • 2047590 - ET PHISHING Observed TOAD Domain (hpsupport06 .us in TLS SNI) (phishing.rules)
  • 2047591 - ET PHISHING Observed TOAD Domain (help83 .us in TLS SNI) (phishing.rules)
  • 2047592 - ET PHISHING Observed TOAD Domain (help85 .us in TLS SNI) (phishing.rules)
  • 2047593 - ET PHISHING Observed TOAD Domain (pcindigo .us in TLS SNI) (phishing.rules)
  • 2047594 - ET PHISHING Observed TOAD Domain (msofthelp .com in TLS SNI) (phishing.rules)
  • 2047595 - ET PHISHING Observed TOAD Domain (pchorse .us in TLS SNI) (phishing.rules)
  • 2047596 - ET PHISHING Observed TOAD Domain (mshelp9 .us in TLS SNI) (phishing.rules)
  • 2047597 - ET PHISHING Observed TOAD Domain (mshelp06 .us in TLS SNI) (phishing.rules)
  • 2047598 - ET PHISHING Observed TOAD Domain (mshelp07 .us in TLS SNI) (phishing.rules)
  • 2047599 - ET PHISHING Observed TOAD Domain (a128 .us in TLS SNI) (phishing.rules)
  • 2047600 - ET PHISHING Observed TOAD Domain (apples7 .us in TLS SNI) (phishing.rules)
  • 2047601 - ET PHISHING Observed TOAD Domain (mshelp014 .us in TLS SNI) (phishing.rules)
  • 2047602 - ET PHISHING Observed TOAD Domain (hpsupport05 .us in TLS SNI) (phishing.rules)
  • 2047603 - ET PHISHING Observed TOAD Domain (pcalpha .us in TLS SNI) (phishing.rules)
  • 2047604 - ET PHISHING Observed TOAD Domain (cshelp02 .us in TLS SNI) (phishing.rules)
  • 2047605 - ET PHISHING Observed TOAD Domain (securedhelp .us in TLS SNI) (phishing.rules)
  • 2047606 - ET PHISHING Observed TOAD Domain (pcfox .us in TLS SNI) (phishing.rules)
  • 2047607 - ET PHISHING Observed TOAD Domain (mshelp7 .us in TLS SNI) (phishing.rules)
  • 2047608 - ET PHISHING Observed TOAD Domain (cshelp07 .us in TLS SNI) (phishing.rules)
  • 2047609 - ET PHISHING Observed TOAD Domain (cashapp06 .us in TLS SNI) (phishing.rules)
  • 2047610 - ET PHISHING Observed TOAD Domain (cashapphelp012 .us in TLS SNI) (phishing.rules)
  • 2047611 - ET PHISHING Observed TOAD Domain (supportlife .us in TLS SNI) (phishing.rules)
  • 2047612 - ET PHISHING Observed TOAD Domain (apples2 .us in TLS SNI) (phishing.rules)
  • 2047613 - ET PHISHING Observed TOAD Domain (mshelp04 .us in TLS SNI) (phishing.rules)
  • 2047614 - ET PHISHING Observed TOAD Domain (gshelp .us in TLS SNI) (phishing.rules)
  • 2048047 - ET PHISHING [TW] Tycoon Phishkit Domain (devcraftingsolutions .com in TLS SNI) (phishing.rules)
  • 2048048 - ET PHISHING [TW] Tycoon Phishkit Domain (codecrafterspro .com in TLS SNI) (phishing.rules)
  • 2048180 - ET PHISHING Observed TOAD Domain (login .helpsystem .cc in TLS SNI) (phishing.rules)
  • 2048181 - ET PHISHING Observed TOAD Domain (gbhelp .cc in TLS SNI) (phishing.rules)
  • 2048182 - ET PHISHING Observed TOAD Domain (lbhelp .us in TLS SNI) (phishing.rules)
  • 2048183 - ET PHISHING Observed TOAD Domain (wdhelp .us in TLS SNI) (phishing.rules)
  • 2048184 - ET PHISHING Observed TOAD Domain (mchelp .cc in TLS SNI) (phishing.rules)
  • 2048185 - ET PHISHING Observed TOAD Domain (kbhelp .info in TLS SNI) (phishing.rules)
  • 2048186 - ET PHISHING Observed TOAD Domain (mta-sts .gub .bio in TLS SNI) (phishing.rules)
  • 2048187 - ET PHISHING Observed TOAD Domain (amz34 .us in TLS SNI) (phishing.rules)
  • 2048188 - ET PHISHING Observed TOAD Domain (login .pcsystem247 .cc in TLS SNI) (phishing.rules)
  • 2048189 - ET PHISHING Observed TOAD Domain (gbhelp .live in TLS SNI) (phishing.rules)
  • 2048190 - ET PHISHING Observed TOAD Domain (dbhelp .info in TLS SNI) (phishing.rules)
  • 2048191 - ET PHISHING Observed TOAD Domain (jxhelp .info in TLS SNI) (phishing.rules)
  • 2048192 - ET PHISHING Observed TOAD Domain (axhelp .live in TLS SNI) (phishing.rules)
  • 2048193 - ET PHISHING Observed TOAD Domain (jxhelp .us in TLS SNI) (phishing.rules)
  • 2048194 - ET PHISHING Observed TOAD Domain (cashapphelp19 .us in TLS SNI) (phishing.rules)
  • 2048195 - ET PHISHING Observed TOAD Domain (jxhelp .cc in TLS SNI) (phishing.rules)
  • 2048196 - ET PHISHING Observed TOAD Domain (pcsystem247 .cc in TLS SNI) (phishing.rules)
  • 2048197 - ET PHISHING Observed TOAD Domain (athelp .live in TLS SNI) (phishing.rules)
  • 2048198 - ET PHISHING Observed TOAD Domain (wdhelp .live in TLS SNI) (phishing.rules)
  • 2048199 - ET PHISHING Observed TOAD Domain (gub .bio in TLS SNI) (phishing.rules)
  • 2048200 - ET PHISHING Observed TOAD Domain (mail .retfaqboos .site in TLS SNI) (phishing.rules)
  • 2048201 - ET PHISHING Observed TOAD Domain (mghelp .live in TLS SNI) (phishing.rules)
  • 2048202 - ET PHISHING Observed TOAD Domain (support7 .cc in TLS SNI) (phishing.rules)
  • 2048203 - ET PHISHING Observed TOAD Domain (33 .gub .bio in TLS SNI) (phishing.rules)
  • 2048204 - ET PHISHING Observed TOAD Domain (mail .mrree .gub .bio in TLS SNI) (phishing.rules)
  • 2048205 - ET PHISHING Observed TOAD Domain (pxhelp .us in TLS SNI) (phishing.rules)
  • 2048206 - ET PHISHING Observed TOAD Domain (emv1 .gub .bio in TLS SNI) (phishing.rules)
  • 2048207 - ET PHISHING Observed TOAD Domain (helpsystem .cc in TLS SNI) (phishing.rules)
  • 2048208 - ET PHISHING Observed TOAD Domain (retfaqboos .site in TLS SNI) (phishing.rules)
  • 2048209 - ET PHISHING Observed TOAD Domain (cxhelp .us in TLS SNI) (phishing.rules)
  • 2048210 - ET PHISHING Observed TOAD Domain (gchelp .info in TLS SNI) (phishing.rules)
  • 2048211 - ET PHISHING Observed TOAD Domain (mshelp58 .us in TLS SNI) (phishing.rules)
  • 2048212 - ET PHISHING Observed TOAD Domain (dfhelp .cc in TLS SNI) (phishing.rules)
  • 2048233 - ET PHISHING Observed TOAD Domain (gxcare .cc in TLS SNI) (phishing.rules)
  • 2048234 - ET PHISHING Observed TOAD Domain (tenty247 .top in TLS SNI) (phishing.rules)
  • 2048273 - ET PHISHING Phishing Domain in TLS SNI (imedcloud .net) (phishing.rules)
  • 2048275 - ET PHISHING Observed Crypto Phishing Domain in TLS SNI (phishing.rules)
  • 2048828 - ET PHISHING Observed TOAD Domain (nxhelp .live in TLS SNI) (phishing.rules)
  • 2048829 - ET PHISHING Observed TOAD Domain (r2care .cc in TLS SNI) (phishing.rules)
  • 2048830 - ET PHISHING Observed TOAD Domain (bgcare .cc in TLS SNI) (phishing.rules)
  • 2048831 - ET PHISHING Observed TOAD Domain (hscare .us in TLS SNI) (phishing.rules)
  • 2048832 - ET PHISHING Observed TOAD Domain (bgcare .online in TLS SNI) (phishing.rules)
  • 2048833 - ET PHISHING Observed TOAD Domain (bscare .live in TLS SNI) (phishing.rules)
  • 2048834 - ET PHISHING Observed TOAD Domain (c2care .us in TLS SNI) (phishing.rules)
  • 2048835 - ET PHISHING Observed TOAD Domain (cshelp03 .us in TLS SNI) (phishing.rules)
  • 2048836 - ET PHISHING Observed TOAD Domain (a2help .us in TLS SNI) (phishing.rules)
  • 2048837 - ET PHISHING Observed TOAD Domain (hscare .cc in TLS SNI) (phishing.rules)
  • 2048838 - ET PHISHING Observed TOAD Domain (h2care .cc in TLS SNI) (phishing.rules)
  • 2048839 - ET PHISHING Observed TOAD Domain (bghelp .live in TLS SNI) (phishing.rules)
  • 2048840 - ET PHISHING Observed TOAD Domain (bgcare .info in TLS SNI) (phishing.rules)
  • 2048841 - ET PHISHING Observed TOAD Domain (bshelp .info in TLS SNI) (phishing.rules)
  • 2048842 - ET PHISHING Observed TOAD Domain (cashapphelp2 .us in TLS SNI) (phishing.rules)
  • 2048843 - ET PHISHING Observed TOAD Domain (d2care .us in TLS SNI) (phishing.rules)
  • 2048844 - ET PHISHING Observed TOAD Domain (c2care .cc in TLS SNI) (phishing.rules)
  • 2048845 - ET PHISHING Observed TOAD Domain (g2care .us in TLS SNI) (phishing.rules)
  • 2048846 - ET PHISHING Observed TOAD Domain (hscare .info in TLS SNI) (phishing.rules)
  • 2048847 - ET PHISHING Observed TOAD Domain (a2care .cc in TLS SNI) (phishing.rules)
  • 2048848 - ET PHISHING Observed TOAD Domain (hscare .online in TLS SNI) (phishing.rules)
  • 2048849 - ET PHISHING Observed TOAD Domain (bscare .cc in TLS SNI) (phishing.rules)
  • 2048850 - ET PHISHING Observed TOAD Domain (hshelp .online in TLS SNI) (phishing.rules)
  • 2048851 - ET PHISHING Observed TOAD Domain (n2care .cc in TLS SNI) (phishing.rules)
  • 2048852 - ET PHISHING Observed TOAD Domain (n2care .us in TLS SNI) (phishing.rules)
  • 2048853 - ET PHISHING Observed TOAD Domain (mshelp09 .live in TLS SNI) (phishing.rules)
  • 2048854 - ET PHISHING Observed TOAD Domain (i2care .cc in TLS SNI) (phishing.rules)
  • 2048855 - ET PHISHING Observed TOAD Domain (b2care .cc in TLS SNI) (phishing.rules)
  • 2048856 - ET PHISHING Observed TOAD Domain (bghelp .online in TLS SNI) (phishing.rules)
  • 2048857 - ET PHISHING Observed TOAD Domain (bscare .us in TLS SNI) (phishing.rules)
  • 2048858 - ET PHISHING Observed TOAD Domain (bscare .help in TLS SNI) (phishing.rules)
  • 2048859 - ET PHISHING Observed TOAD Domain (bshelp .us in TLS SNI) (phishing.rules)
  • 2048860 - ET PHISHING Observed TOAD Domain (g2care .cc in TLS SNI) (phishing.rules)
  • 2048861 - ET PHISHING Observed TOAD Domain (h2care .us in TLS SNI) (phishing.rules)
  • 2048862 - ET PHISHING Observed TOAD Domain (j2care .us in TLS SNI) (phishing.rules)
  • 2048863 - ET PHISHING Observed TOAD Domain (q2care .us in TLS SNI) (phishing.rules)
  • 2048864 - ET PHISHING Observed TOAD Domain (r2care .us in TLS SNI) (phishing.rules)
  • 2048865 - ET PHISHING Observed TOAD Domain (a2care .us in TLS SNI) (phishing.rules)
  • 2048866 - ET PHISHING Observed TOAD Domain (d2care .cc in TLS SNI) (phishing.rules)
  • 2048867 - ET PHISHING Observed TOAD Domain (axhelp .us in TLS SNI) (phishing.rules)
  • 2048868 - ET PHISHING Observed TOAD Domain (bgcare .help in TLS SNI) (phishing.rules)
  • 2048869 - ET PHISHING Observed TOAD Domain (i2care .us in TLS SNI) (phishing.rules)
  • 2048870 - ET PHISHING Observed TOAD Domain (suvfix .us in TLS SNI) (phishing.rules)
  • 2048871 - ET PHISHING Observed TOAD Domain (bghelp .cc in TLS SNI) (phishing.rules)
  • 2048872 - ET PHISHING Observed TOAD Domain (m2care .us in TLS SNI) (phishing.rules)
  • 2048873 - ET PHISHING Observed TOAD Domain (dfhelp .live in TLS SNI) (phishing.rules)
  • 2048874 - ET PHISHING Observed TOAD Domain (j2care .cc in TLS SNI) (phishing.rules)
  • 2048875 - ET PHISHING Observed TOAD Domain (bgcare .live in TLS SNI) (phishing.rules)
  • 2048876 - ET PHISHING Observed TOAD Domain (bshelp .live in TLS SNI) (phishing.rules)
  • 2048877 - ET PHISHING Observed TOAD Domain (hshelp .live in TLS SNI) (phishing.rules)
  • 2048878 - ET PHISHING Observed TOAD Domain (m2care .cc in TLS SNI) (phishing.rules)
  • 2048879 - ET PHISHING Observed TOAD Domain (brhelp .live in TLS SNI) (phishing.rules)
  • 2048880 - ET PHISHING Observed TOAD Domain (hshelp .cc in TLS SNI) (phishing.rules)
  • 2048881 - ET PHISHING Observed TOAD Domain (bghelp .us in TLS SNI) (phishing.rules)
  • 2048882 - ET PHISHING Observed TOAD Domain (cancel247 .info in TLS SNI) (phishing.rules)
  • 2048883 - ET PHISHING Observed TOAD Domain (b2care .us in TLS SNI) (phishing.rules)
  • 2048884 - ET PHISHING Observed TOAD Domain (hshelp .us in TLS SNI) (phishing.rules)
  • 2048885 - ET PHISHING Observed TOAD Domain (bscare .info in TLS SNI) (phishing.rules)
  • 2048886 - ET PHISHING Observed TOAD Domain (hscare .live in TLS SNI) (phishing.rules)
  • 2048887 - ET PHISHING Observed TOAD Domain (kelbyonel .nl in TLS SNI) (phishing.rules)
  • 2048888 - ET PHISHING Observed TOAD Domain (catreenpr .is in TLS SNI) (phishing.rules)
  • 2048889 - ET PHISHING Observed TOAD Domain (hshelp .info in TLS SNI) (phishing.rules)
  • 2048890 - ET PHISHING Observed TOAD Domain (aphelp .us in TLS SNI) (phishing.rules)
  • 2048891 - ET PHISHING Observed TOAD Domain (bshelp .support in TLS SNI) (phishing.rules)
  • 2048892 - ET PHISHING Observed TOAD Domain (bgcare .us in TLS SNI) (phishing.rules)
  • 2052529 - ET PHISHING Observed Microsoft Phishing Domain (iapparel .top) in TLS SNI (phishing.rules)
  • 2055059 - ET PHISHING TA427/Kimsuky Domain in TLS SNI (phishing.rules)
  • 2851672 - ETPRO PHISHING Observed Lastpass Phishing Domain (lastpass .colleqeinvest .org) in TLS SNI (phishing.rules)
  • 2852770 - ETPRO PHISHING Observed Microsoft OneDrive Phishing Domain (mycourier .email) in TLS SNI (phishing.rules)
  • 2855317 - ETPRO PHISHING Observed TOAD Domain in TLS SNI (phishing.rules)
  • 2855541 - ETPRO PHISHING Observed TOAD Domain in TLS SNI (phishing.rules)
  • 2856168 - ETPRO PHISHING Suspected TA453 Domain in TLS SNI (phishing.rules)
  • 2856776 - ETPRO PHISHING Observed Shein Merchant Related Phish Domain in TLS SNI (phishing.rules)