profile-img
Kyle Ehmke

@kyleehmke

Threat intel researcher focused on infrastructure hunting. Views are my own and not my employer's. Others: @[email protected] @kyleehmke.bsky.social

calendar_today31-03-2014 02:13:47

2,0K Tweets

5,1K Followers

306 Following

Kyle Ehmke(@kyleehmke) 's Twitter Profile Photo

Two sets of suspicious domains registered through Njalla about ten min apart on 1/18:

msft-events[.]com
event-msft[.]com

msftncis[.]com
ncsimsft[.]net

Not definitively related, but timing, theme, and string switching suggest an overlap. Not hosted, but worth keeping an eye on.

Two sets of suspicious domains registered through Njalla about ten min apart on 1/18: msft-events[.]com event-msft[.]com msftncis[.]com ncsimsft[.]net Not definitively related, but timing, theme, and string switching suggest an overlap. Not hosted, but worth keeping an eye on.
account_circle