msn.com

Domain

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

March 4, 2026

Last Seen

June 18, 2026

API

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

Legitimate domain used as a proxy for threat actor infrastructure — victim of compromise, not attacker infrastructure

This indicator was flagged as a false positive by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 2

Infrastructure · 5

Malware trackers · 2

Web search · 2

Related Clusters (2)

Operation Endgame Disrupts Evil Corp's SocGholish Malware Network

Jun 18·67 sources

Microsoft Outlook.com Email Rejection Issue Affects Users

Mar 4·1 sources

Related Entities

Malware Ransomware Hades Russia Healthcare Cobalt Strike Sunburst T1047 - Windows Management Instrumentation T1055 - Process Injection T1059.001 - PowerShell T1071 - Application Layer Protocol Windows