This cluster centers on 5 connected domains identified through shared infrastructure and registration patterns. The domains include goldenplan411.com, moneycopilot.com, scamalert.io, vesmail.email, snif.host.
The connected infrastructure includes 1 email addresses (support@vesmail.email).
This campaign was identified through automated analysis of threat intelligence feeds, email threat intelligence and entity relationship mapping.