indicatorurl
hxxps://2117[.]filemail[.]com/api/file/get?filekey=T0EnWQ6NugHkW_kLfDxPBEw_um6NSkg9ZwNRQ_5lrKrLLUo35pV8m3TKv1LqF3zZzdUm
- First seen
- 2026-05-22
- Last seen
- 2026-05-22
- Sightings
- 1
Posts referencing this indicator
- Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns
Payload delivery URL triggered from the phishing page