This cluster centers on 3 connected domains identified through shared infrastructure and registration patterns. The domains include richflights.com, earnflight.com, titanbullies.com.
This campaign was identified through automated analysis of threat intelligence feeds and entity relationship mapping.