Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
About
Search posts and IOCs
sign in
Loading…
https://sherwin-williams.primeforgeco.org/document/ · URL · cyfar.ca
indicator
url
hxxps://sherwin-williams[.]primeforgeco[.]org/document/
copy defanged
copy refanged (live)
First seen
2026-06-12
Last seen
2026-06-12
Sightings
1
Posts referencing this indicator
Device code phishing bypasses password stealing
R
Reversinglabs
Phishing landing page and beaconing endpoint observed in network traffic analysis.
2026-06-12