Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
Detections
About
Search posts and IOCs
sign in
Loading…
indicator
url
hxxps://events[.]msft23[.]com/take
copy defanged
copy refanged (live)
First seen
2026-05-21
Last seen
2026-05-21
Sightings
1
Posts referencing this indicator
SEO poisoning campaign leverages Gemini and Claude Code impersonation to deliver infostealer
E
Eclecticiq
C2 endpoint used to request initial configuration or staging data.
2026-05-21
https://events.msft23.com/take · URL · cyfar.ca
