indicatordomain
url[.]us[.]m[.]mimecastprotect[.]com
- First seen
- 2026-05-13
- Last seen
- 2026-05-14
- Sightings
- 1
Posts referencing this indicator
- Riding the Rails: Threat Actors Abuse Railway.com PaaS as Microsoft 365 Token Attack Infrastructure
Legitimate Mimecast URL Protection abused to wrap an intermediate redirect