This cluster centers on 5 connected domains identified through shared infrastructure and registration patterns. The domains include pd3mo1so-svcs.prod.shaw.ca, shaw.ca, pd2mr2so-ssvc.prod.shaw.ca, pd2mr2so-svcs.prod.shaw.ca, idcmail-mo1so.shaw.ca.
The connected infrastructure includes 1 email addresses (866040200.27858878.1426087457236.javamail.root@shaw.ca).
Do not click links to any of the flagged domains. If you have visited one, check your accounts for unauthorized activity and consider changing your passwords. Do not reply to suspicious emails or click any links or attachments they contain. Check the sender's domain carefully for misspellings or unusual variations. You can report suspicious contacts to the FTC at reportfraud.ftc.gov or to the FCC at consumercomplaints.fcc.gov.
This campaign was identified through automated analysis of threat intelligence feeds, email threat intelligence and entity relationship mapping.