This cluster centers on 9 connected domains tagged as Password: lunex, PureCrypter, zip. The domains include lunt.revio.live, lunq.revio.live, lunme.onters.sbs, lunhx.onters.sbs, lunqv.hollower.sbs, lungx.hollower.sbs, lunhx.hollower.sbs, lunts.hollower.sbs, lun.marvek.live. 9 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus.
Flagged domains in this cluster, lunt.revio.live, lunq.revio.live, lunme.onters.sbs, lunhx.onters.sbs, lunqv.hollower.sbs, lungx.hollower.sbs, lunhx.hollower.sbs, lunts.hollower.sbs, lun.marvek.live.
This campaign was identified through automated analysis of threat intelligence feeds and entity relationship mapping.