indicatorurl
hXXps://wivoumea[[.]]ru/HAPApOYtrk1Zzs0iF6mk@/$
- First seen
- 2026-05-13
- Last seen
- 2026-05-13
- Sightings
- 1
Posts referencing this indicator
- Weaponizing Fear: Iran Conflict-Themed Phishing Uses Fake Emergency Alerts
Stage 2 observed payload URL hosting the fake human verification page.