TROYANOSYVIRUS
Volver a dominios

rf.gd

Phishing

Referenciado por feed externo

Detalle de Dominio

Estadoactive
Fuenteurlhaus
URLs asociadas10
Primera observacion3/8/2026, 7:41:14 AM
Ultima observacion4/1/2026, 9:18:11 AM
Fuente phishingopenphish
Ultima observacion en OpenPhish4/18/2026, 7:27:56 PM

IPs asociadas

Ninguna

URLs Relacionadas

URLHostEstadoAmenazaFecha
https://winstonchurchill.rf.gd/MSI_142506.pngwinstonchurchill.rf.gdofflinemalware_download4/8/2026
https://winstonchurchill.rf.gd/img_175626.pngwinstonchurchill.rf.gdofflinemalware_download4/8/2026
https://winston1.rf.gd/img_201258.pngwinston1.rf.gdofflinemalware_download4/1/2026
https://winston1.rf.gd/img_215835.pngwinston1.rf.gdofflinemalware_download4/1/2026
https://winston1.rf.gd/img_143439.pngwinston1.rf.gdofflinemalware_download4/1/2026
https://winston.rf.gd/img_141003.pngwinston.rf.gdofflinemalware_download3/8/2026
http://excellence02.rf.gd/arquivo_20260227020225.txtexcellence02.rf.gdofflinemalware_download2/27/2026
https://excellence01.rf.gd/optimized_MSI.pngexcellence01.rf.gdofflinemalware_download2/24/2026
https://hidden8001.rf.gd/optimized_MSI.pnghidden8001.rf.gdofflinemalware_download2/24/2026
https://lucabrasi.rf.gd/optimized_MSI.pnglucabrasi.rf.gdofflinemalware_download2/24/2026

Correlaciones IOC

domainrf.gdurld39f5b130800e2c4d4f0480d60240d9629a7541fbbaa6cc2685e7d1d73384fd9phishing_hosts
domainrf.gdurl396c3b2288cd19baea7828b1fca6e637756421852c5854f93003a63b7e2b9f7dphishing_hosts