Attack spotlight

Subdomains.txt

October 2, 2025

Impersonated Evite and Punchbowl invitations used for credential phishing and malware distribution

A variety of malicious payloads delivered through similar fake invitations

Subdomains.txt

I stared at subdomains.txt , the digital map of a kingdom I wasn't supposed to visit.

My heart hammered against my ribs. I opened the file again, scrolling to the very bottom. There, isolated by a dozen blank lines, was a single entry that hadn't been there a minute ago: we-see-you.your-home-wifi.local subdomains.txt

It started as a simple curiosity—a bug bounty hunt for a massive tech conglomerate. My terminal screen flickered, casting a cool blue glow over my keyboard as I ran the script. The file was supposed to be a standard list of web addresses: ://company.com , ://company.com , maybe a forgotten staging server. Instead, at line 402, the naming convention shifted. ://company.com ://company.com ://company.com I stared at subdomains

I pinged void . The response time was instantaneous, almost as if the server was waiting for me. I tried to resolve the IP, but it didn't point to any known data center. It pointed to a set of coordinates in the North Atlantic. There, isolated by a dozen blank lines, was

Related Articles

March 3, 2026
How we built high speed threat hunting for email security
Sublime news

How we built high speed threat hunting for email security

Hugh Oh
Hugh Oh
Engineering
February 24, 2026
Enhanced reporting and analytics provide complete visibility into email security
Sublime news

Enhanced reporting and analytics provide complete visibility into email security

Art Chavez
Art Chavez
Product Marketing
AJ Williams
AJ Williams
Product Manager
February 19, 2026
Fake Google Meet invitation, fake Microsoft Store, real malware attack
Attack spotlight

Fake Google Meet invitation, fake Microsoft Store, real malware attack

Montel Oliver
Montel Oliver
Detection
Kyle Eaton
Kyle Eaton
Detection

Frequently asked questions

What is email security?
Email security refers to protective measures that prevent unauthorized access to email accounts and protect against threats like phishing, malware, and data breaches. Modern email security like Sublime use AI-powered technology to detect and block sophisticated attacks while providing visibility and control over your email environment.

Now is the time.

See how Sublime delivers autonomous protection by default, with control on demand.

BG Pattern