indicatordomain
irs-doc[.]com
- First seen
- 2026-05-14
- Last seen
- 2026-05-14
- Sightings
- 1
Posts referencing this indicator
- When tax season becomes cyberattack season: Phishing and malware campaigns using tax-related lures
Malicious domain impersonating the IRS to deliver ScreenConnect or SimpleHelp.