Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
Detections
About
Search posts and IOCs
sign in
Loading…
indicator
url
hxxps://2117[.]filemail[.]com/api/file/get?filekey=T0EnWQ6NugHkW_kLfDxPBEw_um6NSkg9ZwNRQ_5lrKrLLUo35pV8m3TKv1LqF3zZzdUm
copy defanged
copy refanged (live)
First seen
2026-05-22
Last seen
2026-05-22
Sightings
1
Posts referencing this indicator
Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns
Palo Alto Networks
Payload delivery URL triggered from the phishing page
2026-05-22
https://2117.filemail.com/api/file/get?filekey=t0enwq6nughkw_klfdxpbew_um6nskg9zwnrq_5lrkrlluo35pv8m3tkv1lqf3zzzdum · URL · cyfar.ca
