This cluster centers on 21 connected domains identified through shared infrastructure and registration patterns. The domains include kickstarter.com, cryoniks.com, btcbible.com, engadget.com, windows.net, phishing.web.core.windows.net, securethelogs.com, crixerox-secondary.z15.web.core.windows.net, bancofamerika.blob.core.windows.net, techcrunch.com, blogs.msdn.com, instagr.am, citizensbank.com, quwiex.com, freepressjournal.in, techtypical.com, indianexpress.com, safetydetectives.com, printblur.com, asiandating.com and 1 more.
The connected infrastructure includes 1 email addresses (banker@citizensbank.com).
This campaign was identified through automated analysis of threat intelligence feeds, email threat intelligence and entity relationship mapping.