indicatorurl
hxxps://www[.]jsonkeeper[.]com/b/KUWNE
- First seen
- 2026-05-13
- Last seen
- 2026-05-14
- Sightings
- 1
Posts referencing this indicator
- Fake imToken Chrome Extension Steals Seed Phrases via Phishing Redirects
Threat actor-controlled configuration endpoint used to fetch the phishing redirect URL