PULSE NAME
Phishing domains
WHITE enrique.delahoz 2025-07-09 Modified: 2025-08-08
23
IOCs
MEDIUM VOLUME
Set of related phishing domains, using the same ki. According to https://www.mimecast.com/threat-intelligence-hub/scattered-spider-attacks/, they are related to Scattered Spider
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (23)
All domain hostname
TYPEINDICATORDESCRIPTIONCREATED
domain aws-us3.com 2025-07-09
domain aws-us4.com 2025-07-09
domain aws-us5.com 2025-07-09
domain executiveteaminvite.com 2025-07-09
domain grid-sendlogin.com 2025-07-09
domain https-loginsg.com 2025-07-09
domain https-sendgrid.info 2025-07-09
domain https-sglogin.com 2025-07-09
domain https-sgpartners.info 2025-07-09
domain https-sgportal.com 2025-07-09
domain loginportalsg.com 2025-07-09
domain mysandgrid.com 2025-07-09
domain securehttps-sgservices.com 2025-07-09
domain server-sendlogin.com 2025-07-09
domain sgaccountsettings.com 2025-07-09
domain sgportalexecutive.org 2025-07-09
domain sgsettings.live 2025-07-09
domain usportalhelp.com 2025-07-09
hostname sendgrid.aws-us3.com 2025-07-09
hostname sendgrid.aws-us4.com 2025-07-09
hostname sendgrid.aws-us5.com 2025-07-09
hostname sendgrid.executiveteaminvite.com 2025-07-09
hostname sg.usportalhelp.com 2025-07-09