{"type":"bundle","id":"bundle--a55be1de-8067-5806-a736-c8339e8f2c83","objects":[{"type":"identity","spec_version":"2.1","id":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","name":"PhishDestroy \u2014 NameSilo Investigation","identity_class":"organization","sectors":["non-profit"],"contact_information":"https://phishdestroy.io"},{"type":"indicator","spec_version":"2.1","id":"indicator--60931386-7be8-5b7c-93ef-08dbd607546c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0-02.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0-02.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a871fd09-7bbc-529f-904d-eaed87b89ad4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0-usps.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0-usps.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59f12ec1-af8b-5dec-ab86-d548f75fa1a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 000197.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '000197.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99e04f23-570d-52a1-a9be-3433c9db2303","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 000446.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '000446.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8498cea5-0328-5f16-9955-1906eab7f145","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 001-1mytelus1-0verchargerefund1.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '001-1mytelus1-0verchargerefund1.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de83dff6-5e72-5c63-b5d2-91be0e3e4cb0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 001.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '001.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07419fb8-9455-57e0-ae37-40606094685f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0019-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0019-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c3f0d51-0b43-5823-9b28-8ac3375facd4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 001clearcustums-dhl1.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '001clearcustums-dhl1.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f6128df-8a94-551e-b91d-efcf34efb477","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 001verifyrbcacc0unt1.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '001verifyrbcacc0unt1.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--849a7a49-c983-59ab-8f10-da578864a862","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0049bonnbonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0049bonnbonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dd8577e-1b23-5d97-ac2e-1d65aa3bf6cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 005932coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '005932coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fa952c4-4d1e-5c9b-aeef-3d7bfe14dcd9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 008896-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '008896-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22e52568-bcb5-5c23-9034-f2fd745e26f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0088kk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0088kk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e66ea7d5-c0c9-5972-9835-cf33aa38c1f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 00892784-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00892784-apple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d659c88-b455-513d-823d-a03dcf2be9c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 00952184-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00952184-apple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85d490d3-4485-5168-96d5-534fd978c45d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 009586-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '009586-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52f3e609-33c5-54a2-b338-4514d571e8e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 00aaatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00aaatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3fb5f36-f3f5-526a-8aa4-8e77a48ccde5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 00aattt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00aattt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f9a2df0-475c-5b2b-bb46-09b5ce5820e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 00mcoinbase3ethxrp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00mcoinbase3ethxrp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7665b1-6253-531e-ac2f-a1caaa574f72","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0117re1attempt011cp.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0117re1attempt011cp.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fd7e9f2-acd5-59c5-ae7b-dfbcb55b8167","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0123winlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0123winlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f042c8dc-c2d8-5c3b-99de-bd1c7a6d1402","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 012att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '012att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b78df8f-d2e6-5ffe-bc6a-e03d948711b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 017314coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '017314coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90ed0ece-169f-5993-95b5-4e72ed2e6fd6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 017betloginj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '017betloginj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c300926-6ce6-58fa-87ad-8a0f00c47d02","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 019182coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '019182coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--460e2173-ed65-5cbc-8c1a-4a391a2586b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 01banzhu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01banzhu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cba33268-ef5c-581c-8437-bd1f3009a81c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 01banzhu.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01banzhu.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b7a6b81-fa20-5db2-a374-f8f82f91a0d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 01banzhu.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01banzhu.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eaf97ec-b19d-52b3-ae66-4df2b004dccd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 01bm0-verifymyl0gin.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01bm0-verifymyl0gin.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--debea410-c668-58a3-91c5-701abdc65604","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 01bmoverifymylogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01bmoverifymylogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceb0ae74-8d4e-5195-92a1-fa8c706e79f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 01customscanada1-dhl.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01customscanada1-dhl.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62195dee-6345-5244-bc28-a632505e1eb5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 01dellsecured.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01dellsecured.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d97ca49-e146-5551-8b59-f6853e2cbf7f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 01l0gin-securemybm0.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01l0gin-securemybm0.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b00fca0f-a4f7-5aab-b53c-9cb132635ffa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 01missav.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01missav.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba17c056-44f4-5658-aa74-9fdaab8e7a46","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 01myaccount1-overcharge1bill.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01myaccount1-overcharge1bill.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3637a6fa-54ab-53d7-b1e4-dea71d8274cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 01verify-bm0acc0unt1.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01verify-bm0acc0unt1.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4508ab5d-b5f0-5c5c-8511-57165b3dfd28","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 01verify-clientacc0unt.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01verify-clientacc0unt.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af1c8cb8-a6e8-5e29-ba29-6fdd83fed4f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 02-dell-secure.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '02-dell-secure.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62de1feb-2913-5e7a-b6dd-a60e26039545","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 020hansui.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '020hansui.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a712f0bb-07c4-5690-a601-805d9e646e1b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0218652-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0218652-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--583e8fae-5037-5e49-b5ca-82a95e053710","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 026439coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '026439coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53790995-5155-55d8-95ab-9697dd0832da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 028visa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '028visa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--345840b0-2bc0-5e52-a724-3321584ff581","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 029lianzhou.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '029lianzhou.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d12debe-d2ac-5431-98a6-a35c22c33121","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 02att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '02att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea1864d3-3e97-599b-8814-f56dce5fe658","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 02dcc5a3b84f.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '02dcc5a3b84f.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e89ce1ff-5770-56a1-8d55-f6fbcf43e153","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 02dellsecure.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '02dellsecure.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbe330f5-882e-5e7d-a911-6840f60f8689","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 033skz.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '033skz.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4224ffcf-a4c4-51b1-9451-b152ed0258dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 037yu.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '037yu.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62c80718-ffd6-54ed-9ef5-b3a2d5b0472a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 03att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '03att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--337ad116-2428-58ca-98f5-4c75cec6e789","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 042704coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '042704coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8527883b-9d82-5e8a-bda1-9c8fb56361f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 04att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '04att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd5f1c10-6d6c-5fe3-abaa-51ff1aee329c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 04s43hnab8kha.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '04s43hnab8kha.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--354ff29a-161b-519c-bd67-c7bd1ba0a360","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 051qq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '051qq.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad4c72ec-2798-51ad-96a1-ed17a37fee5a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 056expressauto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '056expressauto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2da4a27-7797-51cc-aa3d-490b731e05cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0573ups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0573ups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4111697-a396-5396-bf54-67d73dc4eede","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 057az.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '057az.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af6dc17a-60c8-58aa-a273-46a01d6f1279","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 058230coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '058230coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78686f07-b496-5c0b-b221-b444309940ea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 05att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '05att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03a11f4d-4739-5fb4-a5ff-96982a1e5dc8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 05attv.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '05attv.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71fb33d-660c-5029-ac93-2f358e646290","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 062a.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '062a.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8749ceda-f71c-508b-ba10-c04ff62babe1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 064kk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '064kk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--406b5448-01a8-59ff-ba07-518e549c5ec0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 068betlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '068betlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcb58331-80f4-5523-acc2-3e930eddfc6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 06att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '06att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8698b2ab-e885-5377-a320-9164442cc250","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 06updatelive.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '06updatelive.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e97df73f-f081-5d32-9f40-252e7921f4d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0700betlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0700betlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c932d8f0-07d1-5274-8286-18e3bcf4d7d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 071kk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '071kk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5bbffab-d19e-51b0-a472-9fff408eb3e2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 075950t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '075950t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f0d053e-82ed-5ea7-9fba-0f5831939d8d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 077gamex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '077gamex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4797bfec-b30b-5f20-953c-1142642a38fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 079mm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '079mm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46d1305a-50fc-536d-8c0f-4ab9e36374eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 07att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '07att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--386eb01e-e98d-5d73-a037-72119e81bbe8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 07secure-sunath65.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '07secure-sunath65.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--befed489-b853-50b3-a3f0-b0833587db86","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 080fbe5ee7af.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '080fbe5ee7af.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a396f89c-09d1-5125-a38c-57fa911c34da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 088061.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '088061.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5da63754-c8f1-5217-b30f-3f1a6cf0c9af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 08att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '08att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f3a8d8e-5eae-5ea8-a671-5c369a85dd6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 08liv3zorn-update3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '08liv3zorn-update3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39851f09-693c-5670-be6e-e4d7f13005f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 08updatedlive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '08updatedlive.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0d52030-22bc-5ae3-94b8-a31e44cc33e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 094575coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '094575coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdac68ea-71bd-5214-ab2a-a9bc0f3857b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 094849coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '094849coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5da9f45f-ae75-5f97-aaae-4fce7134e163","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 094kk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '094kk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e90e8c8-7ec1-5ed4-85cc-b45a68110edf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 095849coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '095849coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b73b9fd8-7b1a-5e5d-a99b-d356a2c7f7a1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 098249coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '098249coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b31a2c17-5529-57ea-be8c-3a3f73182239","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 098304-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '098304-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02fb87e4-51f4-5008-9024-33e59336c940","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 098654coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '098654coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42e3b6be-b02d-501e-a40e-5f3003731985","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 09account.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '09account.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a19bcf13-96c1-50cc-bc02-1b05f6d29050","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 09att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '09att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b65c42dc-d45a-5e39-b375-8a7c27bef071","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 09dkbp.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '09dkbp.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fd4f6c4-225a-5e6c-b293-0e72ca6fb4ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 09viplogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '09viplogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e19e7d42-2487-5a1c-a411-33a722711bf1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0anzd3.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0anzd3.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9320968-14a8-53cf-8740-2ae029642e58","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0apirs.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0apirs.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e13f925-cadc-5c79-b3da-e413bdd20aa1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0apps-colnbase.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0apps-colnbase.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a419ac4b-73c2-5af0-8b56-a7743f34197d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0attocs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0attocs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36577e9c-43bd-5532-b1d4-8e8a103fc554","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0auth2-colnbase.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0auth2-colnbase.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74ba605e-e47d-5659-937a-42719279710b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0auth2-colnbase.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0auth2-colnbase.network']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e049ed60-5d6d-5467-b3c9-a330905ac88b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0auth2-colnbase.services","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0auth2-colnbase.services']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ed9a053-23b2-58a9-873d-83410a76ed8b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0auth2-colnbase.support","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0auth2-colnbase.support']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2357c671-3622-532a-aa19-43d549a22dac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0auth2-myaccount.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0auth2-myaccount.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cbb6baf-4988-5a71-92fd-7b7374512284","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0auth2-myaccount.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0auth2-myaccount.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6320e9c-4390-54c0-ace3-591019aada73","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0auth2-myaccount.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0auth2-myaccount.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceca6dea-397f-514b-a9e8-9cb62ea5f9f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0authssassapp.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0authssassapp.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--027e52b9-b911-5cc1-8ce0-cf2c7818be97","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0btentuformularioenlinea.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0btentuformularioenlinea.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ccad560-5a90-5aeb-9847-80da214253b4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0c1ups.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0c1ups.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--615d7e9e-d3ee-5c16-bdf5-18e9fd097437","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0chainvault.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0chainvault.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ffa367a-323a-5283-9f72-1069eb1bc067","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0che777bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0che777bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30931588-37e1-5404-b331-622cf0031495","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0cryptomarkettrends.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0cryptomarkettrends.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e731f3ee-dc49-56fd-88a4-59390720c4a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0cryptonewsdigest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0cryptonewsdigest.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ecdc5f3-5ff6-57e4-af1a-9986167c3783","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0cryptopulsex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0cryptopulsex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee751e5-cf28-513d-9ba1-8d11864f7485","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0e9bmok3.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0e9bmok3.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6da28e11-c8ee-5ba8-bad6-fa473fa8ea5a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0fastcryptohub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0fastcryptohub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06a63662-0883-5896-b89d-d917896dab8f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0ffice-loginmicrosoftoutlookonlineauths845855.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0ffice-loginmicrosoftoutlookonlineauths845855.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37a41af8-6b32-552c-9c12-3b194751cd53","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0ffice-microsoftonedriveonlineauthlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0ffice-microsoftonedriveonlineauthlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60cd5996-79b2-5cb0-8f28-4c0585a77307","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0ffice-microsoftoutlookonlineauth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0ffice-microsoftoutlookonlineauth.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd00fe0f-f101-57ee-af0b-bb586825b728","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0hypercryptox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0hypercryptox.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b941499f-624b-58a3-8601-9ba0a3e8151f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0irsztbjfwhh3.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0irsztbjfwhh3.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90b21a01-0166-5ad4-ab52-9193c4bad229","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0jnabshj.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0jnabshj.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4f009df-fa57-5d1b-9e17-846cd41a19b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0k365login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0k365login.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74e069f5-88c3-56bd-a08d-e69bd2033eeb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0kjcoin-account.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0kjcoin-account.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0227aba-6afa-5307-8bcc-837d4ce87529","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0ldhlbk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0ldhlbk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8ccf7a3-cc68-5b6d-86b7-d0a2e83851c4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0ledgerly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0ledgerly.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--691f0ee9-0d7e-55ac-9133-17f56a442c0d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0nchaincrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nchaincrypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c507b06-ccea-5df3-bf0f-278e35b9434a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0nedrive-secured.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nedrive-secured.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3222225a-346e-5ad5-88de-0705fec16749","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0nftmarketplaceinfo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nftmarketplaceinfo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4b62a95-2706-5057-838f-9248eb3079b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0nifx-ssax5.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nifx-ssax5.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25cd32dc-e8cb-509a-b8c9-6d88e253b78a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0nifx4-ssax7.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nifx4-ssax7.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94b03037-e364-5b70-bd8b-6198973215cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0nlinerep0rts-reviewsupdate.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nlinerep0rts-reviewsupdate.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47c2f8ee-e0d6-541e-b8c2-41324db42bdb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0penattendantscard.news","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0penattendantscard.news']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c676d91-fded-5888-ac8a-8f2b31bf9284","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0quantumcryptox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0quantumcryptox.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48152da8-99ce-5e9d-8de2-64bb23e8273a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0rbcrh.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0rbcrh.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9425a6ab-1655-5d89-ae7e-f39a1acc5c74","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0rofit-forexsignals.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0rofit-forexsignals.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bccc065-cdba-515c-b92b-f7d72e22073e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0rrlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0rrlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0533f63-f524-564b-b119-43e9a4301863","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0scatterna.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0scatterna.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--720d440b-ea64-5e52-8989-863da4f3d0af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0scatterna.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0scatterna.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--567434a8-0991-53e6-85a6-384b4fb39cee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0secure-hlp-ref-cu.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0secure-hlp-ref-cu.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2efc05ea-2272-588d-922d-e29e5af65a5e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0securequantai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0securequantai.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1cc7f42-4b9c-5dda-96b0-07a1aaf6a958","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0securewalletreview.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0securewalletreview.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00595c8b-996f-5715-bc09-157e69b4058a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0ssain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0ssain.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c34ee9f-6a66-5a67-964e-481b34402a13","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0sssaa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0sssaa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71965489-e384-53da-b4a3-81b66daca8c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0tokeninvestor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0tokeninvestor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3e11fe3-a231-5975-824f-3d596d6e580c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0tokenize.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0tokenize.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3842c0f3-b33c-52bc-b64b-270eb3de4c51","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0utl00kmicrosoft1online.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0utl00kmicrosoft1online.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2af2428d-6678-5eec-a7ae-700a7b7e7d94","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0x0claims.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x0claims.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d86db27c-bf0a-51d9-b8a9-47775d77d54d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0x0tokens.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x0tokens.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--452c6b76-b480-55e8-ab99-c2ea5f6e792d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0x3lbp-updatewasl.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x3lbp-updatewasl.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ae52ab3-c369-50b6-8dd3-777ab90fad19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0xaitoken.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xaitoken.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6adce8e6-3a72-5f09-a599-09439c33c9cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0xbitcoin.foundation","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xbitcoin.foundation']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--881b6d79-b5b7-575f-86e8-4e942dea49e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0xkraken0alo.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xkraken0alo.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c7bb003-52c8-54b4-b9ad-5261ab141df0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0xkraken0alo1.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xkraken0alo1.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86ff3157-dd78-541d-9e9b-530bca6861b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0xkraken0atlas.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xkraken0atlas.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7475a8b8-c365-5f90-aa60-5e90e8dc7ea0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0xkraken0cash.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xkraken0cash.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1801d222-7f6d-5b9e-9353-769d5d3e1d3f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0xkraken0en.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xkraken0en.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bcc2f7a-738a-5822-a6f1-7d99f4ce80fe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0xkraken0gob.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xkraken0gob.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94a9faca-e016-5039-9fe3-6c6661e7eaed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0xkraken0milli.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xkraken0milli.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74d03204-606e-52ce-b224-dd1c6d0ba403","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0xkraken0milyon.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xkraken0milyon.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aac092e-c16c-5fe2-999b-d8c26fa960fb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0xkraken0son.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xkraken0son.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bc32366-9106-5d88-93a4-3a9cac2f59c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0xkraken0tam.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xkraken0tam.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--224070e3-88e3-5d86-848f-c0669abaf501","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0xkrakenplay.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xkrakenplay.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--956da8dc-689f-5f36-aca7-5a7d9e50c0ac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0xnft2xrfsdg6iyjret436ijynjrh34214rfsafcu8k6f.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xnft2xrfsdg6iyjret436ijynjrh34214rfsafcu8k6f.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad87ec10-5168-5f97-b67e-e928f53f4e98","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0xnfts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xnfts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18929eeb-1938-5c00-bd24-f9cb6aa2b80d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0xsslbp-upsonl.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xsslbp-upsonl.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f155d11-79b3-57ce-a8a1-20c597421507","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 0xvpn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xvpn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d16038a-3a4f-569c-a3bf-66b9e3d41cc9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1-acctsmyrogerspayment-services.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-acctsmyrogerspayment-services.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f8e04c2-0d88-5e5f-ae27-d8ec7b61ba71","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1-bitcoin.contact","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-bitcoin.contact']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbe10db9-a049-584c-931b-de36df726101","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1-jiji-microsoft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-jiji-microsoft.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f376afcf-2241-5346-93fa-157b50850831","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1-jin-microsoft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-jin-microsoft.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d10e0ebe-40cf-525c-b662-8d2bf46174ff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1-myrogersbill-center.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-myrogersbill-center.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63505b8f-02f0-5106-92f7-818e83041d28","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1-myrogersphoneplan-accts.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-myrogersphoneplan-accts.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad2ce95f-d5d0-523c-bc75-8c4d8c44beb7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1-myservicesrogersoverview.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-myservicesrogersoverview.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f03a64-1487-5ee2-9386-01eaa68ba426","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1-petron.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-petron.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81d167e3-5731-5f56-a8a7-b5e75fa899a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1-petron.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-petron.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--772515cd-230d-5145-9f93-5a36400c3ed2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1-petron.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-petron.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--571867db-2c35-5d3e-aacf-2d6a56e86718","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1-qian-microsoft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-qian-microsoft.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--415b73e8-49b6-5897-94d5-80e1e23fb390","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1-rogerswirelessmobileplan-selfserv.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-rogerswirelessmobileplan-selfserv.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--867025da-bda5-5c73-8c5d-12778615483c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1-wallet-release.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-wallet-release.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a185724-4f39-5c11-9072-d3392cc4bf25","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1-win-official.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-win-official.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74248d6e-237b-5813-b3a7-966a81737926","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1-worldcoin.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-worldcoin.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dce9667f-ca04-581d-9373-5dc79f4c57a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10-1telus1deposit-refund0.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10-1telus1deposit-refund0.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e0e07c3-2c16-52e4-96c6-196b1280c741","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 100-1cus0msfedex-lastreminder.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100-1cus0msfedex-lastreminder.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d71d899c-68c4-57e0-b57a-9b1f116d4683","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10000kbw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10000kbw.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f23088b-c0dd-5f39-8d2e-33aae831ebcb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1000wattecho.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1000wattecho.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b105d131-fe22-5dc9-ad1a-cceff7fb982b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1001-tattoos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1001-tattoos.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14c65234-3b84-5c45-8e36-ae295fdbbb90","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1001interac-etranfer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1001interac-etranfer.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab0d1aa0-b418-52a7-8ac7-d35c94338eea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1001totologin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1001totologin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57f2a1d4-fa6e-5f34-9d8e-b713e32a5019","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1009-1mytelus-ref1undmyacc0unt1.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1009-1mytelus-ref1undmyacc0unt1.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00ee2286-ff73-5fd2-ad5d-3345f6e7b6d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 100bitcoinhomepage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100bitcoinhomepage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d97b4ca-8cf4-518d-bcab-82e7942d19b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 100hanzi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100hanzi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f84168ea-09e6-52a7-b57e-779ae17c8a92","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 100tiktok.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100tiktok.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b02148e-0720-53f5-bd3f-6746561897bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 100urls.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100urls.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df0577b0-c1dd-57bc-b38c-c046c78e44da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 100viplogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100viplogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--333e3662-3564-528c-83a9-0f92e9605216","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 100viploginvip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100viploginvip.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--055f3caf-f1e0-5974-acf0-84e316c59887","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 101-1ref1undmytelus.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '101-1ref1undmytelus.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22ea8ac2-6814-57f8-8198-9973a3551202","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 101931-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '101931-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09c71f9e-8349-5f6e-ac0e-2cddb29a4ad6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 101bitcoins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '101bitcoins.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b6eedcb-fe52-58e5-8e1f-c14409aaf096","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 101chargesfedex-cust0ms.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '101chargesfedex-cust0ms.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0fd0885-9f2b-5696-b214-2e5883c9e928","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 101firsatkxpida.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '101firsatkxpida.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0afc5040-4736-5048-adad-635127310541","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 101jianzhan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '101jianzhan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--452d81e7-875c-50ec-be32-3371a5de77bc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 101tigerlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '101tigerlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--796e34df-c209-5b25-a98e-a0a8528877c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 101update-bm0inf0s.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '101update-bm0inf0s.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be41ff32-208c-548c-83df-043c4f979229","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 101verifyrbc-l0gin.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '101verifyrbc-l0gin.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4652e1a6-4ff9-52ac-845f-deca7b113282","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 102-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '102-icloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--619ba6c7-d812-5861-a2e4-25f23e9b63de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1023829-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1023829-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a10bc15-8690-52ec-9ae6-70401abb9fc0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1024token.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1024token.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--838ae60d-246a-57bf-9cea-010217293dbd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1024token.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1024token.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--612525f0-370d-5cd1-8880-06c61acfd141","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1024token.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1024token.one']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5b65b6a-23b8-5a3c-a671-e78408fd9cbb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1026-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1026-apple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7f6e3ec-b5a8-5b43-868f-4519e6b67205","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10265-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10265-apple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a156f1c-67df-5b1d-9bcd-1fea3dcae5dc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 102675-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '102675-apple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55f1b223-341f-5cc4-ba77-e4153c6d5a3d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 102676-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '102676-apple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64989b6a-9b31-5b96-811e-c27b8009b32e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 102677-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '102677-apple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f69b561a-2e6b-570d-b6e4-c79407ebeb96","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 102678-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '102678-apple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e99b93b-b498-50d4-af36-cae583ea2800","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 102679-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '102679-apple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27753fd9-740b-5332-88a3-4142870d1d4c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1041thebridge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1041thebridge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2425f303-9c88-5fe2-ba4f-662bb89a4a07","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 105982-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '105982-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fac47e19-fb8b-5caf-b995-a022e16923cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1065irs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1065irs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35d1ff96-6380-5550-b408-a6af249de858","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 109221coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '109221coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9b164e2-b89a-5617-9783-2d732852c997","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 109301-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '109301-apple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a206ef6f-1da6-5cd4-a006-fb1929c5ef24","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 109485coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '109485coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3dd13c7-3ddf-5bd0-a6ba-ccac58836c87","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 109564glowwise.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '109564glowwise.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--923194d4-d76c-5dd5-9318-5da5b2745fb6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 109564glowwisehub.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '109564glowwisehub.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56400eb0-5e92-590b-8de2-7400ec427589","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 109564glowwiselife.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '109564glowwiselife.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--181d0acc-8f17-5fb7-b406-56f7c92e9a73","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 109564glowwisem.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '109564glowwisem.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--035732db-8689-5cc7-b9cb-cbe28227b5ed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 109564glowwisetime.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '109564glowwisetime.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33b5f0ba-5bb5-55a5-a69f-9c091b7adb15","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 109564glowwisezone.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '109564glowwisezone.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3952de8e-cc3b-50cc-8f1a-696cecd5064f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1099taxcredit-irs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1099taxcredit-irs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1a8d7e6-e097-516f-bc61-b40dd73c22c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10bestcrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10bestcrypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3107b1f-7ab2-5830-8b99-7887f44fcfa2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10bitcoinhomepage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10bitcoinhomepage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0eedbab-5182-5142-a249-6bda05702e82","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10brllogink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10brllogink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ebd3359-6c61-5fc5-8258-657324e80932","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10chairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10chairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87585695-0538-54ab-b599-ea8b21a71edf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10cricsatta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10cricsatta.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df9bea47-63c3-5478-be34-cc808dce93e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10ebrisbuyerbridge.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10ebrisbuyerbridge.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31f1f9ba-203b-553d-b171-faab529c0feb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10ebrisbuyerbridge.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10ebrisbuyerbridge.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d8b67a2-c19b-5891-8249-80bfad628760","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10ebrisbuyerbridge.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10ebrisbuyerbridge.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5536381-f1d8-5092-bc18-1d26f2c7a3ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10ebrisbuyerbridge.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10ebrisbuyerbridge.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a577c99-80a0-54b8-8a75-ccb98a527847","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10ebrispurchaseflow.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10ebrispurchaseflow.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64693a6d-d83a-5741-9d55-d983a9325f98","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10ebrispurchaseflow.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10ebrispurchaseflow.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e4923ea-a2ba-59e5-8c54-c60dde9ac785","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10ebrisretailbridge.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10ebrisretailbridge.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1de1dc49-7527-5195-ad03-95ed8dbacc8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10ebrisretailbridge.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10ebrisretailbridge.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ba93de9-8326-594e-8d8d-67475527d2fe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10ebrisretailbridge.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10ebrisretailbridge.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--667301a4-9452-5aec-95e2-9f49caad1c0c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10ee1fa2e01c.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10ee1fa2e01c.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35d0f1cf-998a-5f6e-a4a0-97c22f2301d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10google.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7ea3e78-fb79-56dd-b312-f3b89bd041a6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10kstrongsummit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10kstrongsummit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab03f591-4339-58c9-82b3-611b83a8b406","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10lirs.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10lirs.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--698fc303-caff-5c85-86e3-9be603df7a98","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10login.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5868428-0ecc-5480-b363-7672388ea3cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10minteardown.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10minteardown.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9f7e2b2-f355-5ef9-80b9-d738213962f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10scatterna10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10scatterna10.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e909b3ec-25ae-5616-b88d-b446d123a26c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10strongheadlines.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10strongheadlines.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7373a3bc-dbfe-55fd-afd8-afa7ba2171af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10xfollowupsystem.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10xfollowupsystem.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee2546c3-f004-5869-856f-19a13a256b14","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10xpattern.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10xpattern.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2f28fee-dc3f-5406-9f9e-b37e097de990","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10xpatterns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10xpatterns.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6e2b537-06c1-5637-8fb7-38fcfffb3304","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 10yearsnft.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10yearsnft.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30fb3848-6d9e-50eb-a557-c1b491003413","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 110verifymylogin-bm0.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '110verifymylogin-bm0.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a605e18-c42b-590b-9844-d1b4f45aa9a5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 111betlogin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '111betlogin.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--546ddf77-b737-502c-aa81-18cb6e2ddbe8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 112134-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '112134-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f56b0d7f-ac65-5d3d-85a7-950ca6771ebc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 112418coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '112418coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--026bcd8a-ff4b-56b2-91f2-38e8fa6ca5f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 116betloginj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '116betloginj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e4d859f-2696-5b89-b16b-9277a85c1bde","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1182lucklogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1182lucklogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d609a33f-1e38-5a97-8420-beb0e5a51ed7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 11842-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11842-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b07a39d7-a997-5d8e-9496-a5a7ee257b32","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1185793-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1185793-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf33a3a2-7ea6-51f2-a636-ba31a306b796","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1188smsverify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1188smsverify.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f85ef12-3dd5-57cc-a674-cea0b51c0053","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 118scalemodel.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118scalemodel.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03615062-0150-5884-8a20-57b74bce7a0b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 119291-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '119291-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1affdb5d-5d07-5a07-9178-5a0f113e1094","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 119betloginj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '119betloginj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6aba0de2-ad1e-57c2-8ac4-4db7e0ef89e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 11aaatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11aaatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e1b21e1-0770-520a-8472-f5d5e0ee189d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 11aatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11aatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d05b069-7ef0-5d9d-86e2-6f2a79193548","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 11aattt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11aattt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07e37bb7-8f05-54f7-8516-c895d0a0e1dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 11alogink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11alogink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed5fee4b-c038-58c1-a1b5-323b2bd60f5f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 11banzhu.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11banzhu.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70d94926-2621-5d2d-a1bb-a8253009f11f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 11bet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11bet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce65837c-5160-5bf0-90d5-ce43a0c44930","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 11betapplogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11betapplogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dabe92f-9d02-5ecc-8f07-a4c67ec8946d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 11betloginvip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11betloginvip.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dcfa65b-f0fa-58b2-b566-28d45b8c8cc2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 11betloginwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11betloginwin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e328c56-6090-5269-9859-e8448fa404cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 11bolabonanza.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11bolabonanza.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00169375-78ad-5586-aee0-095937580853","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 11bolabonanza.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11bolabonanza.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5df9e552-1e4d-52f3-8d9d-31039a4325e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 11bolalogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11bolalogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65f25419-1209-5c43-bee7-0097f7ef8039","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 11cclogink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11cclogink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ef2bc0d-2705-5aa8-8888-ac85baa66ae8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 11login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11login.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d623dc0-bc73-5245-b503-002b14322564","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 11pglogink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11pglogink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc47cc63-8959-5e97-8adc-aad3fbf1c6f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 11qlogink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11qlogink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56c69f68-a60c-53f5-9e4d-c46240a7ae24","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 11ttlogink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11ttlogink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f4b8bab-2610-5326-ac6b-9e4d2353bffa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 120betloginj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '120betloginj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8ac7738-51ac-501a-a3de-44d81c543ad1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 120jianzhou.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '120jianzhou.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f7e1ac0-6863-55a1-88b4-b2eb64f39887","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 120vault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '120vault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--232a29d4-1c50-52d2-9edc-5a16c477fca6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 121accountantsukltd.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '121accountantsukltd.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0162cfd0-f467-590e-81e0-7185cb7f3488","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 121crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '121crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7844c9dd-47e9-555b-aaab-34979c0a4b4d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 122betloginj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '122betloginj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41f00ce5-be73-599a-9fb6-23d59d95c022","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123-free-download.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123-free-download.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93767432-21a4-5b25-9c60-0f5a0561ff61","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1234annuitysendmktgs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1234annuitysendmktgs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2627b36-3691-509f-86ec-4c2437621ef3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1235876-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1235876-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--476ebd08-de27-599c-a520-3f65b865e94a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123amthuc.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123amthuc.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34facf5a-d067-5892-98b5-4bc13ca2cbee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123attt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123attt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92fc7e86-5a37-5247-9246-558c3760527e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123bcasinologin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123bcasinologin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a92d93f8-c6a4-502d-b8ca-e40b870f7a6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123betlogin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123betlogin.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24bccbf0-75e4-50f1-8113-792942ba757b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123blogincasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123blogincasino.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b15614a5-8ad7-51b9-bb4d-1880d2d44662","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123blogingame.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123blogingame.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c420b07-1d95-59c1-b01d-c2e3c8056111","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123bloginplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123bloginplay.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53f1ba9b-2e42-58bb-b967-c476faa54d76","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123blogintop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123blogintop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ac11a2a-e7d1-5c05-b3c5-eecd0ce47af0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123cashlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123cashlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d213f7a-55b1-59bf-a222-887ad998f361","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123dzologinvip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123dzologinvip.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff689434-b829-5eef-ba4f-f2fbe53605df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123gacorlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123gacorlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d811d58-6630-5166-9f8b-a2aee5e27da1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123insuranceclaim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123insuranceclaim.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6d57e21-6311-508d-9d9e-4b94e957a62e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123kfclogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123kfclogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75d40795-9b4c-5132-b0ee-23d4c1a1010f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123localhookups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123localhookups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e29ed9c-2acf-5828-b74a-e459ea383843","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123movies-official-website.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123movies-official-website.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1f27024-4864-5fdf-90b8-be39aec8b411","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123movies.market","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123movies.market']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a5112ef-0494-568f-8b4a-dc2cc2edaa0e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123mysupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123mysupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d44bcd3b-6abc-572b-9d59-effb331a966e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123nutuk123bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123nutuk123bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d756b2e2-0de4-5eac-ac58-14727f3157f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123nutuk123bonanza1.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123nutuk123bonanza1.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--742d1e11-4f6e-590a-b75b-2c00a8f5c41b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123playlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123playlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55cbf421-5de7-558a-8724-1a6f1b78d0f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123posuiji.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123posuiji.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b0b40fd-4476-5914-88a8-00ad7fe02ae9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123premierfoodssafety.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123premierfoodssafety.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9976305a-00c4-5c3b-9697-11f4c9854cbd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123suit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123suit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d74e36-0588-5e7d-bfd5-87819000ef3b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123suits.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123suits.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24a37429-66e8-57d6-b521-7d65ca5d035b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123upslot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123upslot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ced60bf0-a8fe-5fa6-bb74-3890c39db215","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123usps.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123usps.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4229201f-ca41-5917-ac3d-5f4a8ba4f5cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 123wiplogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123wiplogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d59ae0f-9014-51f1-89aa-ca62a67e10e2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1246-base.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1246-base.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9e39fb7-eb9b-58d7-ac57-2ca37f20d0cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 124867-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '124867-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb4b702e-b119-5bc2-99d3-029cd3375777","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 124983-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '124983-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60dac9d1-af02-5fdb-a5fe-4483d03f574b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1257connecticut.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1257connecticut.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd8129fb-1cfc-594a-83a4-1d39b640ead3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 125872-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '125872-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e375803e-32c2-5944-b2f7-0d51610d2d17","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 125aetjwtjofficial.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '125aetjwtjofficial.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5d22c59-2819-5b47-8630-04d82dd3a4c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 12634891-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12634891-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e1836a8-183e-591d-b6bf-659df3630732","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 126759-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '126759-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06c72488-a4b8-5fe7-94b6-59821c2106a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 12842-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12842-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55c1532a-3a71-5481-88ff-b9cd4a9e9661","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 128sportslogin.blog","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '128sportslogin.blog']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bc009e0-ba99-5549-b352-ac7ce985da82","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 128sportslogin.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '128sportslogin.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b286ba6b-9a44-5c00-b437-478632aa77e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 128sportslogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '128sportslogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c5942eb-e15f-5f79-b43a-3ed646f75aa2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 128sportslogin.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '128sportslogin.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8628c66d-d584-5a65-b5c6-d47cd1ecb2f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 128sportslogin.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '128sportslogin.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ba80927-347d-5937-8c20-3b162ae3f403","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 128sportslogin.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '128sportslogin.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11b38b20-c313-5153-ada0-2b343dfb029b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 128sportslogin.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '128sportslogin.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd051c4-0f57-5ebb-baaa-f3f5fd2842f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 12922-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12922-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5520d84-0c03-52be-ae0d-d9f43abd275f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1293182-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1293182-trezor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81532cae-689c-58ef-b38c-f1776fdfd773","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 129682-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '129682-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00f8f9ab-48a9-5fcb-bb48-20330300e1c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 129873coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '129873coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4f405cd-3959-51bf-95da-988a90ce9384","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 129fu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '129fu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2164451-fb1a-5c0c-acf6-08eb40fabaa4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 12att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8feaa839-c618-5e9e-a557-462df2f1a1bc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 12betlinklogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12betlinklogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bdb4829-916d-5909-9d37-29d1978f8d28","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 12betlogingame.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12betlogingame.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43571035-6bcf-555d-bc89-080da6dacd84","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 12betloginlink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12betloginlink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a394fd2b-bc1c-50bf-b734-4a01d6e0efd6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 12betloginslot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12betloginslot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c5b8317-5528-5851-b6d6-8cee0e3828e9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 12playlogin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12playlogin.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eedbcba-f345-53d6-94b9-01229d655945","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 12playloginvip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12playloginvip.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19c8c964-9d8d-5876-8d85-e79d36a1a233","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 12vault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12vault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0f9f51d-6c6c-5261-affa-39e694e0fd31","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 12verify.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12verify.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5983789c-48b8-53b4-89e6-371f3db53b82","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 130081-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '130081-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de574f39-03f7-56e6-ad25-cf57e7bb24cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 130424-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '130424-kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31b8a37b-55c8-5e79-bb8c-d49684190bb1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 130549-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '130549-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83a15f8e-fb61-52fc-ae2b-b9fe3fafc5ac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 131559coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '131559coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a50cfbe-bb0e-5541-bbb0-a4b7c9d10aa8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 131974t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '131974t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cea0910-94e8-510f-b64c-d3393bb1c2ec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 13389mississauga.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13389mississauga.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60f7f5c7-3bba-5557-b8fa-5c8311581f3a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1346-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1346-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17fd741f-b089-5277-bb21-6c94fbdc9be4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1357985-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1357985-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a31682d-7f99-5aa1-ab29-654244c36f70","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1363721-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1363721-ledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1d58cc3-6b56-54c6-99d7-c0fb00d09062","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1367238-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1367238-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9558070-dd2e-5611-b13e-04a2933b10d0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 138262-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '138262-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a606d1a-cd5e-5e9f-976c-09b098c85b43","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 138login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '138login.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d207b144-4cd5-55f0-8bec-970a990004bc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 13att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce621446-7018-53fd-86a9-e97e26132997","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 13freightlogindonesia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13freightlogindonesia.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e41b01dd-a7c8-51d4-bbd7-4e0f329373e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 13thmrc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13thmrc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a010aa-8710-5195-9803-e6234a15dbc8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 14-stripe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14-stripe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4186e23-08a7-55aa-ae5f-f50dee3a9154","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 140064-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '140064-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2796d3ff-64bf-50c9-8be3-a8afbaff398e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 140245-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '140245-ledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91011ca5-46e3-5069-8b83-abd3e165f050","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 140749-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '140749-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a019e2ed-be17-5ade-9872-a181d7a7695c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 14178coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14178coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--874d26ff-143d-5e78-a436-8de1e2f5529d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 142957-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '142957-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6c95a81-4eb9-5322-b317-0de72660a29e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1432-claim.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1432-claim.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab54f148-f6f5-56bf-a79f-171b5c76b7e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1435823-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1435823-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c397ffe5-cce9-547b-8d7b-932564889f1b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1438solana.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1438solana.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e72377ff-b4c3-5fc4-85a0-c11cbfc8246c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 143messages.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '143messages.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--426b011a-505e-5810-8bfe-1fb29070f081","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 14466bridgewatercrossings.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14466bridgewatercrossings.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6085a40-a6fb-5859-ace8-5665fd17fde4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1448272-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1448272-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aef74c4-9711-562e-8756-b98734c5d7f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 144suites.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '144suites.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b868a3b9-6c77-54c4-8263-14b07351e89a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 147258bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '147258bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f825e551-136c-5987-8923-6e373647a605","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 148282-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '148282-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15e0db00-7f68-5b9b-a3b6-036660610890","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 14889356-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14889356-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7323cd98-4dc6-532c-bd93-bd2d9d7206c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 14att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0f5d06d-22ec-5076-b091-197a2b09530d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 14girs.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14girs.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59bfa36f-ced1-5d5a-b63f-85a54f212391","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 14gjm.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14gjm.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5487a158-cdc0-5e4d-9485-05b3b4361435","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 14sui.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14sui.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b0c9e10-3b3d-5caf-b756-5d3dd9cdc26a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 14sui1.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14sui1.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--215490d8-b219-5b25-9c30-649626faf23a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 14suinb.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14suinb.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06270617-823c-5310-9a99-cc188da1f4a6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 14thprairiehogrally.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14thprairiehogrally.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--412fa44a-fcc5-58ec-9b4c-369af99d2a5f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 15-stripe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15-stripe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78aa4271-81a4-5aba-9b60-2c540866c47d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 150544coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '150544coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a465aa8-2672-5887-87a7-8df47cfe1a13","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 150555coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '150555coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--874f1d3c-52c6-56d8-9369-d531f8cf0be1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 150901-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '150901-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16616f8b-0bc8-55a2-b4bc-cb47953eaf55","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 150942-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '150942-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c1f6e26-3048-5091-b2e2-829030fd10e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 151-colnbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '151-colnbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--330169c8-cae6-5bb0-8d8e-9a5833bebbf1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 151935-cbvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '151935-cbvault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c92b7e93-31f1-5383-8088-ac87c2387934","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 15229farmstand.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15229farmstand.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74d4dcf5-f29d-5f16-beef-80e98cb0d6a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 152775-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '152775-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef9dd575-f1f9-5b35-9d1a-c239ab45005b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1539030-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1539030-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c40d9ab2-04f2-5b50-be35-8561677fe2d0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 155152-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '155152-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06ac2d2a-7748-5ca3-af3d-56022d234e8e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 155274kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '155274kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fc4f8f5-6a11-5986-9eb8-c89c6ae94ac4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1558903-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1558903-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--679b152f-982b-5cbd-b231-ca9569100a5e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1567375-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1567375-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b60de2a7-eb64-55f9-a59c-ad5e87c99c26","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 158023-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '158023-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--517eb856-b6b1-5254-a779-9acf422c9a12","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 15833-cbvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15833-cbvault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbc1707a-ebe2-5914-afb9-6c18030df7ae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 158i.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '158i.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da388ba4-0092-5561-b3df-b71458db02d2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 159886coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '159886coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd28cf9-9571-52ae-92d2-180c5a2e9ac9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 159web3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '159web3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9906201e-1ce2-505e-af73-67b54c6155bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 15a9r34tm0rn1n9.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15a9r34tm0rn1n9.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10669893-7473-5bc4-b83e-efac0ad1694a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 15an4maz1n9d4y.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15an4maz1n9d4y.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4afd210-706c-54f9-a20d-2edcf0d7911a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 15winlogink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15winlogink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b316fb7-1bb6-5ef6-a8f1-a953a9e8f23f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 16-stripe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16-stripe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51452d50-6573-5c61-809c-5d20d7a0a451","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 160marinabay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '160marinabay.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--431a955b-77b6-56d5-893b-a09392a09c15","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 161betloginj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '161betloginj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22658ff1-767b-57a5-834a-c45b01adf2a6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1628934-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1628934-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--801daca7-8cde-571a-bcd6-cdf574b928d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 162yy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '162yy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37833a65-51b8-538c-ba96-c8e2e9655bf8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 163-large-attachment-download.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '163-large-attachment-download.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a82a7235-58ca-5ab7-bc70-344cd7fce7d0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 16423306-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16423306-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d631b5c3-1f7d-5230-9605-8a01e6a0b90a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1654235-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1654235-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32a18246-aa70-5e17-8151-540edb68318e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 165917-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '165917-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38d83106-d086-5986-bc02-30c101654f79","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 166dvd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '166dvd.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f655cc4-3839-57ce-90a2-2c6cd1bcf42c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 166winlogink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '166winlogink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0019f672-f646-5aef-8f92-7f6f2b86334b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 167282-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '167282-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e993afa7-1529-5ee8-b8fa-a5cb1df70210","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1673383-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1673383-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7db37040-f20b-5854-bce5-03fa00ca6b8b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 167vault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '167vault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e0ddf4f-78f7-56e8-9c68-4ab38a14e5bb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 168flogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '168flogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--001bab95-e357-56e1-a500-27a9f5bb6363","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 168kk.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '168kk.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--525a3350-d24b-58d2-82b8-c8a368dcd465","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 168pglogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '168pglogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58bc5a1b-cfca-507a-8a4a-a5f1b5e964a3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 169281-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '169281-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4551068-55d1-5702-a01b-42b7aaeb8cb8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 169876-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '169876-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc53ec85-767b-52aa-9e49-6bebeb9403f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 16att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--175fb85b-6b49-52c3-92dc-c219d984cd4a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 16betloginj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16betloginj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d27a893-49ea-5d23-b86b-027af6910808","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 16dewalogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16dewalogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e98c19e7-e13c-5ddd-8078-e4ee842dc535","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 16eylulakfirsatlarin.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16eylulakfirsatlarin.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00912ae6-37d9-55d3-b37f-e1e0595a18c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 16eylulsizlefirsat.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16eylulsizlefirsat.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d318fd33-85a8-51ff-ae71-e2bc8a51393b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 16farm.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16farm.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--774ec3e0-3ba7-50d3-85f3-5780ad1f9d5c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 16first.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16first.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622bb4e0-92ee-5870-8d2d-58d59b420fad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 16hasanzula.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16hasanzula.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b09fe98-324f-57c5-8558-86646948e584","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 16karagoz1616gmailroyal.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16karagoz1616gmailroyal.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7044c7b-e1a7-5dcc-ad82-152045a903e9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 16winab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16winab.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cf305d5-3a2f-555f-9189-8797f0bdfd56","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 170143-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '170143-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb69ee01-c01d-5ca3-8f5d-3492a40ff2c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1701503coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1701503coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--977d83e3-d37f-5ca8-a50d-8d2d5b7d7590","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 171976coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '171976coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4da4852d-2099-590e-a064-1bd34f49f14f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 171976v-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '171976v-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dd8b8e8-2efe-5605-826d-90fd5e1e3e85","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 172348-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '172348-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c072d30d-4a39-58b1-aff2-875728d74470","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 173894-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '173894-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--722d7690-4fda-5c61-a98d-200071295fe8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 173954-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '173954-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--637a3d01-5d69-5653-ad65-1d2c327897c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 175678.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '175678.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--347f7284-f86e-5911-9b0d-ac0cb44abc09","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1758529-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1758529-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10fa32ee-0f21-5409-ad7a-cb94d40e0502","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 175869kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '175869kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d93892f7-e5ff-5380-8fdc-14faff812e4a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 176853-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '176853-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1669af95-f37b-5132-be25-a6e6ed091188","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1768532-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1768532-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad469dd-ae5d-5555-a131-3317395f1a06","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 178280coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '178280coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--930eedd9-c68e-5eec-9675-4a73a17bcc54","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1782872-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1782872-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e321919e-b0b6-5dc9-ba36-b2c06c8c5449","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 178490-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '178490-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1db46676-3737-521c-bced-294b9d8c2fc7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1785263-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1785263-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b96420cf-8452-528f-97b7-33dfbb9edb5f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1785726-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1785726-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19238ea3-4b3f-5ab2-b937-0a541e952db2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1785763-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1785763-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f99799-f1fc-56ad-b3be-c523fd9f3be9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1785964-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1785964-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eda7f28a-a7e5-5771-b6cc-ec6a90a5b4a1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 178633a-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '178633a-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef8e9226-d8f7-5015-b0c4-73b51d0de9b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 178652coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '178652coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a022458b-69d8-52a9-81a1-5e493f11bb23","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1787683-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1787683-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc5d9a08-58d5-56bb-88ea-68316bb0bb41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1791-mail-support.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1791-mail-support.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f3a0c35-e467-51a0-a1ec-08c1af8c5136","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1791-mail-support.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1791-mail-support.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15deecb7-1ce6-50be-94cc-2bd0fe167299","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 179583c-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '179583c-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78b88629-1a35-55fb-87bb-a721f21d481c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 179583coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '179583coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58afc9e3-81e1-588e-bb73-b7485d5927a7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1796058-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1796058-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79bcf96b-e6fa-5e46-afec-0bda79fbdd02","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1796873coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1796873coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b435a88-7b37-507a-9eb2-802c5c1cb39e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1798532-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1798532-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5497ad85-d9ce-5cff-a426-9ce7a32c8ff1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 179viplogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '179viplogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1a8f85c-d501-5877-b6aa-0b1b6d3affa6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 17adil17bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17adil17bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--400dd13c-eeb4-5f21-9915-5efeb34e308b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 17betloginj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17betloginj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6cdfe41-b751-520e-ad3f-33403a29df41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 17cyiqicaoofficial789wiki.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17cyiqicaoofficial789wiki.wiki']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06d257ad-908a-5479-b808-5bdad4b19703","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 17dvdv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17dvdv.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0423d76-2802-542f-8936-7a19d07dc1dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 17mirs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17mirs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f31db5b-b6bf-5f4f-b251-b9cad1dcba5d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 17nciti.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17nciti.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55cb91f6-e988-5347-91d0-12f726254959","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 17sui.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17sui.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd7c1181-b22f-54dc-8f0c-6b8e8fb07a89","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1800-usb-account.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1800-usb-account.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e3df391-4304-5f2a-b87c-986a61558de4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1800accountinghelp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1800accountinghelp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d643f5d7-eef8-599b-b31b-0ee3a837c593","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1800accountinghelp.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1800accountinghelp.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18307489-b199-5d64-94b5-107194a7e579","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1800accountinghelper.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1800accountinghelper.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14536152-417e-5574-a084-76651eef550e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1800accountinghelpers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1800accountinghelpers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8037bf3a-d9ec-582a-ae52-cc0e62cbe902","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1800accountinghr.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1800accountinghr.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d66fa808-c309-5ecc-aaa7-6f5eda5e7d8d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1800bitcoin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1800bitcoin.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bfe5f54-9ee0-57c8-a9c7-6534b356696f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1800jianzhan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1800jianzhan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb28e20b-ca6a-51fa-995b-72005ec40240","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1801596-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1801596-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2c1fabe-c24a-513e-8245-f35169ce98fc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1802012-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1802012-ledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--580df895-df21-5743-8377-eccf95d8f136","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1804crypto.ooo","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1804crypto.ooo']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--975d2912-7443-536e-966d-64c5bd489e83","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 180xpjdc.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '180xpjdc.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59734eae-c556-5d53-8050-fe20d7ea762a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1815798-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1815798-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c88a557-68dc-5b93-aec1-949d8e32069d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1817586-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1817586-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8720cd3-6daf-5fbe-a7b1-c2c75a15641b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1817596-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1817596-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffa1c53a-a208-5501-a6e4-f225494dee1e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1819041-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1819041-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30499ab3-94dd-51f2-9f84-e93ab0a1ea25","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 181957-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '181957-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed2f1547-5c58-5305-a4ea-279e5ebf315a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1819588-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1819588-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ad24c22-cf34-506b-9bae-c9366964a0f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 182037kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182037kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60ea62ca-f044-5d8d-8e06-9b52ac24ddfd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 182519-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182519-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d2c68fb-fef1-5ca7-8762-3238d7c0ab07","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 182717-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182717-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--218ec17f-8372-5891-ab10-85ef58df238d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1827311-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1827311-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f8b4138-bee7-5f14-9b57-9b30a370e019","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 182732-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182732-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05f793ac-a6e9-5023-a997-d5f48bba701c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1827930-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1827930-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e4aa08b-58b7-57db-a08c-cc8c9e87cf30","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 182932crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182932crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11b57d22-c69e-5358-9d66-434da60dfd06","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18300.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18300.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--273a2789-9940-5f75-895c-73a2f3180704","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 183294robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '183294robinhood.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--569cdda8-36f4-55cb-b0ec-64ba7d5cb002","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1836738-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1836738-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8b722ea-ff42-5bfa-be93-87814b42416d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1839459-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1839459-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a167b4a3-9539-57b1-b55d-3830305e488a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1843736-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1843736-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9515f853-2883-555b-99cb-968585c52be2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 184471coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '184471coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78812cb1-0c07-5576-8fd3-1071d378ea02","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18459-exodus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18459-exodus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a82e765-2bca-5985-b5eb-fc38508d3afe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 184593-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '184593-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7200bbe4-627d-5930-8f55-a699e5a38d11","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18461-exodus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18461-exodus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4173ce3-e98d-504d-8a8f-37080628b915","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 184722-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '184722-icloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f641f8bc-97b6-5036-8b62-814fcf366cda","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1847579-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1847579-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a5dc15-4109-5eba-9813-ff00fbd0b96a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1847963-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1847963-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4539a9-b8ac-51a6-9cca-d49f373f5f3f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 184822-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '184822-gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba2f3adb-4a1b-59f4-ac71-3c8720b3dd8d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 184937coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '184937coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42efd67a-7ed8-5e96-8675-32032259b538","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1854-base.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1854-base.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09f254e5-b341-588d-8a3f-7f140a4a6ff6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1857293-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1857293-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3029c83-189d-5dd8-bd21-e2486ec04a31","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1857581-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1857581-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01e842bd-32aa-5019-82bf-a97877abc9ba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1857638-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1857638-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf06bcb-8faf-5642-8d09-e3dd3abf7739","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1857687-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1857687-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--351bbbf2-761f-50a5-befe-bcc0f4d5f3f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 185hq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '185hq.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18b48056-742d-5c7c-8489-76994edd46c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18728-gmail.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18728-gmail.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe953a59-033c-5006-816b-f88a7f4baf77","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1872834-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1872834-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bceb865f-0014-53ae-be4d-5908a740534a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1874372-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1874372-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc811724-0044-5503-8eb9-d3448c01fcfd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 187586a-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '187586a-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60a8d2f3-22fd-516c-9a1a-8035c9c1cdfc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18763-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18763-ledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce1bd6d8-0f32-5b3c-969c-280853d61f78","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1876943-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1876943-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1200705-f2dc-5a1e-9739-671b67a93b41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1878.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1878.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5ea928c-4383-59f2-acc7-dde535891553","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 188201-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '188201-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0f71b40-0bfc-5f51-b53d-9ce4e9242138","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18820coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18820coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a34428f3-bea6-5d42-bca5-854ba78efcf1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1888blogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1888blogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc1f0d40-eeb4-5faa-a9de-4403878a3392","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 188bethiphologin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '188bethiphologin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f7ca4e0-e4ad-5a7a-aa89-0e40dd15e22b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 188betloginapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '188betloginapp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4312f33f-b799-5429-8c30-18fc257278dc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 188betlogingame.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '188betlogingame.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2af55e-84b5-5c15-bd87-d39672f52f72","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 188jianzhan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '188jianzhan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e99ec454-1b75-5a81-bd82-c19fbae2a00d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18901-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18901-icloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71113090-a556-5d68-9eb7-41c3cd90c482","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18925-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18925-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b7ec94f-1827-558e-b46f-567d3ddbf934","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1892attire.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1892attire.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9c6797c-b791-536d-934a-530b70e39689","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 189492-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '189492-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d705a665-cd85-5069-836d-404f28491ab8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 189583-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '189583-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f3e2f9f-8442-5ddc-b48a-86c20e33d6dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1896733-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1896733-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeefe773-1757-53e5-bff2-7d35596e87cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 189747a-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '189747a-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b250b4b1-868b-5daa-be95-0e7b84cea704","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 189betloginwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '189betloginwin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4405a475-99bc-528c-8213-bcbf971d38bb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18asmr.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18asmr.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04c0602a-ebfd-5fae-91cb-205cad088c15","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35582962-b2be-5b33-ba81-d6ed084e9965","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18battles.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18battles.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3c789eb-765a-5a96-b6c8-86840f4009c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18betloginj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18betloginj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10841fad-6967-5062-a08d-1a2e40b3d0a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18betloginwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18betloginwin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f5ce3af-8ea8-5d7e-8307-04789dfe7a3a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18comic1.art","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18comic1.art']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a4bb3bb-2205-5054-9600-a43d612e9c94","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18finally.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18finally.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be4aed10-c190-57a6-8c72-4a0ad7307154","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18firstsex.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18firstsex.cc']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b01525b-59d8-5f7c-a8d5-e43bcacd63d3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18hokilatte.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18hokilatte.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a0d93e-afb5-59f3-8ca7-c6e0df1daa0f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18hokilatte.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18hokilatte.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7f6e088-2259-582c-9ec5-5d52fcf24395","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18hokilatte.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18hokilatte.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a818d1f4-07c7-5153-af11-01b0623701ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18hokisui.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18hokisui.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ec3d19d-1c36-5146-aa3e-3bd14dd7f987","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18naked.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18naked.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea535a70-24bf-5dfd-80e8-241065a0c83d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18sui.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18sui.wiki']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bef88da-ea36-5467-b6ee-025bffccb481","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18suijingxuan.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18suijingxuan.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aa34168-9b8c-57ab-98ca-abe8842ba785","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18suimanhua.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18suimanhua.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc7ff789-70d6-5bbe-b0aa-b3f5816dc3b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18suishi.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18suishi.wiki']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2289ebd8-07c3-5a9d-936e-8bd35d0a48d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18suishik.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18suishik.wiki']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--799cc5e6-97a2-5f01-9517-f75dd4a57c54","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18tanab.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18tanab.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49d24c39-a7b5-5b11-8194-3fb78730ed79","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18totologin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18totologin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0df0843-5a19-5eb6-8f78-60ea9279272a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18wheelerclaim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18wheelerclaim.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6979c6d4-7b96-5263-9aaa-e381e8d15325","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18wheelerclaims.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18wheelerclaims.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a7c809a-da80-5e81-8d95-37e3313125dc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 18win3login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18win3login.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b02bb96d-77b5-5054-9bda-b38173c89451","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 190212coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '190212coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40fbbabc-f641-527f-acba-80bfd72588b8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1908573-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1908573-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c6f4c69-92d3-5a7d-9098-9afce109e871","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 191852-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '191852-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b50d15b3-a070-5331-87e3-795891d634e9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 191852a-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '191852a-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57bebbeb-570a-5959-aea3-7b5c77c225eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 191857a-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '191857a-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb141c3c-9ea4-5b47-98fb-953adea52f08","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 191bb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '191bb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01e542ea-7b94-5654-8d9a-b50ba5964a48","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 191ii.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '191ii.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb11fa9d-3807-56d3-b4fe-6cb4bd893c5b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1921128-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1921128-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22689741-bed1-5cb0-bed0-f3f9a6cee8d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19216811login.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19216811login.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec3dce05-bea5-5df7-8a61-9948f2609cf4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1923001-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1923001-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--055b9995-6dfb-5299-8dc6-82fca047fde1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 192424-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '192424-ledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a585cc0-8cfd-59f8-8243-fdac52cad5c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 192479-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '192479-google.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76cc55c7-4025-5f75-9217-f5fb6234b487","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1925273-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1925273-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c42b79cb-3808-568e-8f4f-b1a04600d9b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19274-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19274-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81b47d91-18e3-58c0-8f8a-22cc75131b74","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 192755a-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '192755a-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5987dbb-db81-53b4-a089-f06611de0fb6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 192821coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '192821coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad786ce-ef44-5652-b8ec-812482451942","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19283-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19283-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--819e2766-c1f3-5dbb-bff4-03494e274fa9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1928475-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1928475-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efa0dfaf-f694-5454-8869-a06bd38cbfda","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 192851coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '192851coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7c9f66a-5211-5248-b58f-0a00b584363d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19287-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19287-gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03d92525-45ab-5ca1-97ca-488d60212c45","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 192letrongtan.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '192letrongtan.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a93a129-c0be-5bbe-90ba-08d5763b73d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1931832-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1931832-ledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6036a464-7df0-530e-8e78-22bc0eda1b23","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 193283-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '193283-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5354b2f3-3b07-5537-aa0b-4daea0150bb3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 193482-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '193482-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd5f8cb0-9247-5251-9033-9a0c3bab9c8e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 193691coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '193691coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8891dc7-3a9e-5a0e-9ca3-ae2a9c1ee941","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1937342-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1937342-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7beed9fc-b322-50b2-9e51-4fe31d21c813","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1938274-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1938274-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ef2d1b7-67fc-5f35-b83a-a7a87ca32c3d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19384471-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19384471-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a493426-d42d-5634-86d5-3c8afa83cb97","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1938482-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1938482-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2ea8bfe-924b-5c82-a670-3f4d97810462","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 194023-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194023-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca8a94a5-3837-5a54-857a-ac0a594312fe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19404183-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19404183-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b196810e-c963-55dc-915e-176071d4f3e1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 194268-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194268-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58b8c99b-eba5-54bb-be56-98b93cde028c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 194270-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194270-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ed5d5ca-dc92-5bc9-ad18-9e401afd2679","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1942862-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1942862-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f017f3a6-ac89-5523-9a59-ebbccefc3841","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 194382-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194382-icloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c3e23c1-58a0-5849-acb6-c866f975ca0d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 194511-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194511-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a60111b0-578e-5c2f-9ccb-615c9df4997b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1945727-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1945727-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--180a23a6-6660-5735-aabe-0d1d0241db6d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 194582-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194582-icloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a258962f-4b6a-5fc6-9f01-77c0835eb439","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19472-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19472-gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dc2ac26-4df0-5306-9b86-f88e6889bece","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 194722-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194722-icloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94dcc534-9188-5401-b8e0-acdb95a8b09b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1947272-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1947272-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--065dbc62-48c6-5359-9654-75797dc8b061","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1947295-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1947295-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecc664cd-2ba2-534c-b6b9-c0e971f61ea5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19478-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19478-gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14862a3a-8e99-5339-8231-8df00339c839","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1947828-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1947828-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c45f069c-c383-5709-85eb-6f7b17eb3ee1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19481-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19481-gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cf5d29a-ed6e-56d4-aa25-6bd898ca2249","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 194822-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194822-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6618b5db-9844-5211-ae59-79a58871b854","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 194822-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194822-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--704b2961-f7f0-52ad-982e-119c672e7390","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1948257-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1948257-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--767faa82-cc1a-5c65-915b-e8921836f6ba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 194826-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194826-apple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9308944c-766b-5fd7-9465-01b8b9953244","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1948262-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1948262-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fada64af-9198-524e-9cce-a68d7d8875cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1948272-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1948272-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fe0e072-d13b-5736-a1fc-a64cbc0cdb64","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 194852-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194852-kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--334cf665-89e1-52da-84d7-a7a993caa79a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 194852a-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194852a-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--887ced30-49ef-598a-be5c-0e7bdb9bbf65","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1948562-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1948562-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a281b56-5d5f-5bb0-9b22-1a6f2b2b00f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 194858-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194858-binance.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76dc637f-bff0-5f79-9a29-3b28313eac26","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1948722-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1948722-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae24109f-cfff-55cb-82aa-c90a1e57ae83","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 194879a-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194879a-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61fa4357-d228-530f-aaad-2c4ad366ee65","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 195276-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195276-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54bc87bf-db9a-50bb-a08a-b38e7aa22508","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1954376coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1954376coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--390c287c-a5ce-5965-b32e-d53722c3ce8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19548-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19548-icloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d407cc2-d863-5ab9-91d4-7117d5bd03ea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1954822-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1954822-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--462e2ec4-636a-5da2-9854-2c5e7b4420b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 195723-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195723-kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f635f8a-1c18-5019-9773-64282cbedcb9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1957238-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1957238-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4651b0e7-800e-5cd6-b356-6dcd55a998df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 195724-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195724-apple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8222c713-cbb5-59b0-b2c9-cb872c308b3c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1957241-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1957241-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86ef2fa2-baa8-5758-80b7-51ed6abd4e78","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 195823-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195823-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59a1852d-a15b-50bc-87c4-40fe0ec480d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1958232-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1958232-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d362d7f-550b-58a6-b688-bfb02e2a4d46","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 195825-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195825-apple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fdad29c-22f5-512a-9ea8-1d5ac32853de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1958292-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1958292-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e1c935e-9433-5883-b9d3-5fc308e8509f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1958293-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1958293-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6d8b696-713b-522d-99b2-3f5c09983284","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1958314-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1958314-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9cc0fbc-1c14-5a71-bf74-c37403748994","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19586-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19586-gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6e4c24-d31a-500c-91ff-e9908988a938","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 196041-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '196041-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e79f2067-7eb2-5821-8d1e-232f423af723","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19683-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19683-ledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffa85cbf-5adb-5c87-a54e-8c22ecb62229","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 196892-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '196892-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e04bee60-7337-5e3c-819a-a841fa846c58","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 196973-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '196973-icloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b38df36-5231-5053-8ada-53d61a0938e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 197481-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '197481-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c21c3e9-462d-5a45-ad9c-59f23e75a37f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1975472-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1975472-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e673c93e-681a-53c3-928e-7519d2b5bd8c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1975724-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1975724-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb3d85c9-a8e7-5b91-a901-1e0e148018e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1975baseballcards.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1975baseballcards.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10acee94-e6f2-5b12-9a0f-20603c5d1e65","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19764831-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19764831-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d148f2e-b0b2-5aea-9113-92565d08ac6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1976838-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1976838-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddc36475-ee94-5534-a1af-ad1566b45541","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 197695a-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '197695a-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20ed33d4-ff38-5e0f-a596-aecc28526197","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1978063-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1978063-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceed3053-5bdc-5884-b2f8-5729993eb048","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1979kara1979bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1979kara1979bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--108bfd30-f53c-52b9-9095-2820d2aab19e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1983029-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1983029-trezor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de0295ee-307a-5fec-8e68-ce15d26d3898","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 198472-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '198472-kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--685f3765-18de-500e-be5e-a7dc3926c4f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1984742-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1984742-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e077331-1075-50c5-9b7e-51f710b7d0cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1985702-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1985702-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ffb3956-459b-5643-94fc-f9ae22681bb3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1985762-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1985762-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9fe09ff-5306-5d66-ba18-a2e571fbe071","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1987320-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1987320-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2a2061d-8373-5595-a81a-0e7ebca5ff86","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1989653-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1989653-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b6ef246-d8f4-577e-ab0d-eb687309fdfd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1993302.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1993302.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a9f63a1-28af-5abb-ad08-fbe8ea909126","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19985f-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19985f-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4a49a56-a9fd-5648-aa7f-8d2b1989a6d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 199winlogink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '199winlogink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a049da3e-bc78-540f-9e82-a108741e4481","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19au8-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19au8-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e56d00f3-5659-5921-82e3-f052601e364c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19dewalogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19dewalogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c34f3b43-0056-5deb-8fa1-1b425e07536b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19dewasuizei.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19dewasuizei.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95e22a1e-eb6d-5657-9744-049974afd724","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19josef07bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19josef07bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ea843b7-87ce-5c56-bc9b-977b709bc2b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19josef07bonanza1.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19josef07bonanza1.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d64f8423-dc60-5963-8c28-8c7a94b42e49","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19lou.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19lou.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e37ca3b-12aa-5169-a303-a4b243c7f6b9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19nlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19nlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02318240-e417-5296-aa07-3add688baf0d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui1.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--496c320d-083c-51e2-be89-8ef634df0560","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui1.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui1.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14d10a9e-7cf1-5faa-911b-1240df0e2be2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui10.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui10.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--caf6e286-bc67-5355-8840-c5dd7712dd91","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui11.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui11.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9edc5f4b-a704-514c-83e1-0fccdc08decd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui12.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui12.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b85139aa-bae3-521f-9431-8d62f5bd53b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui13.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui13.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adaf3e7f-6d68-56b4-9333-5bc8e13bc3c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui14.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui14.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8eeb656-28ae-5d27-8280-9a7f2d7db980","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui15.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui15.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3419b5c-9c1a-561e-9167-8844ced22d90","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui16.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui16.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01cde070-ba1d-5ea6-a322-7b3f04cc44f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui17.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui17.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a467459-1e5f-57c7-8853-0943c3cf332d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui18.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui18.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eba0ab3-b22e-5269-bfe4-4bc06bfe18d3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui19.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui19.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12876312-3d3b-5647-8c0c-e64c36719a82","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui2.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui2.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79e557c9-d707-554f-9c4e-8c9e19819e68","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui20.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui20.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--267ab97f-5f58-5d24-a45f-aeaa6f1de341","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui21.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui21.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5e17cbf-1324-50b3-9fd9-de40a5431fe7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui22.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui22.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c275400f-f1f1-531f-ae01-40d0ed20c3cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui23.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui23.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a496ee9b-5bb9-551e-89bf-56f75e23667e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui24.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui24.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f1fe7b4-55d5-50f7-bf0d-32dc49f7ef18","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui25.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui25.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ae4a8b-c940-54bc-affa-fc52522d9a23","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui26.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui26.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81cde3f2-ce44-5431-af3d-b6e1730cbba7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui27.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui27.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01a58a43-68c8-539d-bf1b-550945e3f731","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui3.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui3.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b18e92-9e6a-5485-9665-211a90235ccb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui4.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui4.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57a9cb63-46ad-5798-9518-2f746d28ed77","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui5.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui5.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ea2393-e7b5-5eaa-a567-edd93e198b4c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui6.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui6.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--486ac989-e41a-5222-a9e3-e006f8c20b6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui7.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui7.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa66864-64c2-50f5-b7df-10709bef8a7c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui8.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui8.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a6d35ec-6497-5700-88ca-08ed7d92c4c4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 19sui9.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19sui9.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0afa0942-b7ab-5b83-ab85-c10029486ce1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1atom-official.casino","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1atom-official.casino']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46c7c62a-7d17-5408-90a9-45a7fa0725b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1att.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1att.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--781adbed-520b-5134-9b4c-76973c083cd0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1attf.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1attf.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f478c45-b093-5e11-9a91-f388b1423c9e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1authentication-securebmo.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1authentication-securebmo.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8edc61d3-33e8-50a6-8a41-6b02aa953012","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1baseheritage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1baseheritage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d40c409e-a497-54c1-9962-ea2e2b146b5b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1billionbooks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1billionbooks.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f10a923-8d08-5273-8bef-0cf5b5dd2a32","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bitcoin-exchange.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bitcoin-exchange.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17cb9886-062f-5b58-ae21-4a3d12719d00","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bitcoin-exchange.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bitcoin-exchange.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae4a854f-d81d-51cb-877e-cc0a26d995df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bitcoin.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bitcoin.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62b36a2b-d626-539a-8530-5dc95e5cbad8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bitcoin.contact","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bitcoin.contact']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec42768f-43ae-5b48-a12b-fb6de78e13f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bitcoin.news","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bitcoin.news']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77e2f0c8-c212-5d52-9a90-3b8647374aae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bitcoin.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bitcoin.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3b8be30-7e7e-523e-bc3e-b6574f1da4ac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bm0my0nline-verifynow.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bm0my0nline-verifynow.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f485fce-5f01-5bd0-999e-119ecd26a736","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bmo-authen1pz9p2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmo-authen1pz9p2.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f49352de-22e0-5ac0-841f-2f394a76e60e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bmo-clientbankinglogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmo-clientbankinglogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72ac439b-f0de-5979-a7ed-d2c115ff4074","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bmo-clientsecureverify.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmo-clientsecureverify.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8719bc99-0b4a-5d8e-96fe-60ce3c5da7f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bmo-myaccount.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmo-myaccount.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9147b11f-1740-5bd3-a506-245870babc26","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bmobank-infoverify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmobank-infoverify.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b34a3a90-f443-517d-83b6-95b419bdd8f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bmosecure.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmosecure.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75087ac1-b8e2-593d-8988-b6aeb569cf7d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bmoverify-secureonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmoverify-secureonline.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78c6cd9a-74ba-559a-9a5b-0a8a240c1ea5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bmwlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmwlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36dbea66-cc29-5ec5-8b5f-3051b369b800","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bonanzaslot88.boats","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bonanzaslot88.boats']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e77b523e-7dc3-56e6-80d9-b30817450529","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bonanzaslot88.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bonanzaslot88.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20456615-aff5-53be-a038-3f9f0487e693","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bonanzaslot88.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bonanzaslot88.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a2df443-3d66-595c-9f7b-c27d43d41dea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bonanzaslot88.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bonanzaslot88.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a48604-d821-53f8-bcaf-c18aa1aa6487","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bonanzaslot88.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bonanzaslot88.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb32fbfc-b186-5dea-963c-f2549fe2b4c6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bonanzaslot88.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bonanzaslot88.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1184352-0a2f-52b6-89ff-19b784a8f814","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bonanzaslot88.homes","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bonanzaslot88.homes']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca7f3dde-b893-553e-9584-c391a73091b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bonanzaslot88.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bonanzaslot88.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa55dd2a-ddc5-57af-be41-e7404d785b32","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bonanzaslot88.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bonanzaslot88.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f8b6f43-85de-52ab-a224-c342adb19da9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bonanzaslot88.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bonanzaslot88.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca465b80-ec30-5d26-bff8-b7b31e8518b8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bonanzaslot88.makeup","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bonanzaslot88.makeup']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fdfbc68-119a-5a58-96a4-16a3df8871f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bonanzaslot88.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bonanzaslot88.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2db1cae-a552-53df-8c47-865b0a7b8dcd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bonanzaslot88.monster","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bonanzaslot88.monster']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfff87c0-0ae0-51e5-9d52-aabd58295ee8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bonanzaslot88.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bonanzaslot88.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--651bb29b-511c-5862-a67c-255ae4f74636","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bonanzaslot88.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bonanzaslot88.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e214e61-f9c0-5c69-856d-1e7ea564d8f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bonanzaslot88.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bonanzaslot88.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50f411fe-ee85-54c5-a8ed-ae30353190f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bonanzaslot88.skin","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bonanzaslot88.skin']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6096094d-7088-510c-a29b-bdc42b0a4194","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bonanzaslot88.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bonanzaslot88.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--065cf519-ee7c-5363-9add-3ed88522a8d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1bwmlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bwmlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee5019d-292f-5b10-9941-55ab92edf629","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1canadapost-resdelivery.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1canadapost-resdelivery.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f56a6be-b7b8-54ca-9a2d-1a91a9683ac8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1centtoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1centtoken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94692112-355b-526d-ab1a-5baa39d80278","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1client-verifybm0.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1client-verifybm0.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1e42863-fcdd-5df0-a2a6-e2badb5e241a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1client-verifymybm0.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1client-verifymybm0.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--717fce6b-0f26-504c-8c16-0004d58bc276","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1cloudbackupservierses.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1cloudbackupservierses.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cbaea46-9fd1-53e2-9a2d-51d2a36f9a75","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1cloudsuite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1cloudsuite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe324177-2843-52c4-8df1-82b86187e724","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1cryptodarkmarket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1cryptodarkmarket.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39fdc361-3a9d-50ee-a60d-04114fe8f60b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1cryptoleo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1cryptoleo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd968291-3d9a-5ca2-b7c6-6f97a81a2d5d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1d-apple.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1d-apple.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d18f24ef-c674-59fe-a830-bb45be94c208","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1d42ghd36as85azx54.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1d42ghd36as85azx54.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a541d55a-ebb6-5e00-923c-2baa0ff4e280","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1da496e7120804cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1da496e7120804cb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8b2cfac-7762-55ed-a209-d96412bfe7d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1dayattic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1dayattic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35b44390-d30a-5279-be90-72b65bac1bc4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1dayattics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1dayattics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0b9b3c9-fa4b-56fa-8da1-32f15dc73526","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1diktatorcash.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1diktatorcash.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be46fcef-aac8-503a-b9c8-6af1a4a8ffa9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1drivesbackupservierses.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1drivesbackupservierses.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d133e3e1-7c40-51bc-9877-c1a934fae9b4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1enzmx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1enzmx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--016519f9-f4ca-546a-84f2-5462746bb2c6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1etrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1etrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--050d4e47-2f10-526d-ab29-883184d057fb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1fctriplebay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1fctriplebay.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c61ac51f-7293-5036-8a57-99f098fad99e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1filevault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1filevault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4caada62-35c0-5561-bf0d-56aa3ff69b60","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1filmywap.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1filmywap.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73dc6a38-6181-54e1-9314-d7f48e0a64af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1firstaid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1firstaid.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad1c22a9-0e81-538e-af18-ce03f3787f0e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1firstam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1firstam.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--642ec5c9-0cb4-514f-bfcd-aca5673d3dc6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1firstcashadvance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1firstcashadvance.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0e54909-3bf8-5124-a72e-154629167c5d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1firstcommonwealth.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1firstcommonwealth.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89e7e248-d0af-582e-bb75-ae3857a2d830","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1firstgfuw.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1firstgfuw.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ece15ec7-9f64-5452-aa7e-0ac2935491b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1frauddep-rbcciient.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1frauddep-rbcciient.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddb4f827-5d53-5662-910d-d1486ad5b7ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1fuel-wallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1fuel-wallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--563d72d0-eec3-5c3f-9a1a-fa9bd86f79d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1gamex.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1gamex.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b190839-b4d0-5927-9cbb-fa560498cff2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1gocasinoofficial.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1gocasinoofficial.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--342c94b0-89e6-5dda-8acd-6c8fdbfdf61d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1gomlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1gomlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c298def5-e53a-5991-80f4-e69b7901e288","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1gomloginbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1gomloginbet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--023a48f1-0245-574d-9e38-75a5e329585d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1hb2hg3.skin","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1hb2hg3.skin']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab473369-cbb5-5bad-b13d-6374d22d2a47","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1iksbet-nft0.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1iksbet-nft0.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--415cd000-b9dd-5079-99cd-d49b43a1edf3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1ilogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1ilogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8106ffe2-22dd-55e4-a562-c507c1a57ed1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1inch-claims.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch-claims.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4973182e-2a50-5d0c-a866-639facab2561","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1inchclaim.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inchclaim.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--875ad73f-ebbb-5262-8033-d5634abf74b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1inchclaim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inchclaim.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a40c6dbd-4457-509c-9270-e2f0a246c9d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1inchclaims.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inchclaims.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--835def78-80ec-5c69-9243-8c7cd4923a56","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1infomyrogersplan-activity.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1infomyrogersplan-activity.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e18770f9-176c-50af-9805-dafdb3bd1434","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1insaatkariyer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1insaatkariyer.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349c63ed-2917-5cee-98ab-da824309c514","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1int-secure.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1int-secure.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8b6bf1a-851b-5d32-a850-60c3a0aefc73","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1inter-secure.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inter-secure.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c4733bc-6dd0-5681-aa73-2278193dac30","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1irskf0wb.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1irskf0wb.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab6f98d1-9f2d-51dd-983c-0bcbf7adc759","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1kissasian.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1kissasian.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c38217e-6b03-54a8-abed-ec7032306e39","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1klavimetronzz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1klavimetronzz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adb80f39-5586-5678-bcae-0fbbbcf56e6a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1latestmobiles.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1latestmobiles.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3c80f89-50b5-55fc-8439-fdbf3d0ce121","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1loadsbackupservierses.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1loadsbackupservierses.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc0b8ffe-a4d0-5c92-9c42-12eda055b322","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1milliontoken.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1milliontoken.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92f93dcc-1904-5656-905e-9e836d5fb7d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1movies-official.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1movies-official.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efc126e8-460e-5afc-9e22-4a9e03ea78ff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1msconnectserver.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1msconnectserver.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f34d4748-85e1-5038-8b26-4ffb22a1c4c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1msserverconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1msserverconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88432def-7419-5f3a-bd25-a39ae0a600f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1myrogersacctsection-dashboard.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1myrogersacctsection-dashboard.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41e3ec97-26f9-5bf7-ab20-e57146d8771e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1notification-canadapostdelivery.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1notification-canadapostdelivery.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d700772-83e9-5c3a-8741-1dd3e7005904","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1ntu1t01secure01auth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1ntu1t01secure01auth.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c358feaf-8294-5595-9044-17ca4b45b510","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1nudism.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1nudism.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffa42439-d4ef-5cea-91e3-baf5813e98a1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1oginmicrosoftonline.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1oginmicrosoftonline.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87f4a57e-05d4-5728-b652-ff10b874c611","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1omniroyal-secure-login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1omniroyal-secure-login.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c816288-2916-56c6-b76a-b75fb9c022af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1on1secure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1on1secure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7baf3384-7fae-5ab9-b7a2-36a50b249cdf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1onlineartacademy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1onlineartacademy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c18a0e-066c-5866-b4bd-4fc218be520d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1orbceria1.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1orbceria1.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d8fd864-27c3-5a24-bf36-146998910a41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1pdfsecureviewer.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1pdfsecureviewer.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7b548fe-0fea-57d8-b84d-2d8fa201d1d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1plugsbackupservierses.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1plugsbackupservierses.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d369ec1-210d-58cf-a8df-854501a52bc4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1quantbackupservierses.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1quantbackupservierses.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e903a46-93d0-5b36-86b6-c96edf44f962","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1quanzheng.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1quanzheng.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4190d1c-62fa-5ad1-b6fa-35f36a6cac58","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1r2frd2.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1r2frd2.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20961cda-89d5-5f5d-b48c-6c8b966598b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1rogersacct-managemyservices.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1rogersacct-managemyservices.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b6ed5b2-9b94-5329-870b-e26a94662a16","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1rogersactivation-services.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1rogersactivation-services.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f2922ca-36b3-5493-ad26-97d6a7807102","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1royalrbc-verify.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1royalrbc-verify.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--692f6762-9ff0-54e5-b220-cdf0e74b0863","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1s487u35ky2d4y.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1s487u35ky2d4y.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--861a6048-df67-5954-b56f-8d7aa53c287e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1sb472k745login4127.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1sb472k745login4127.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86bfb3fd-4ddd-5c34-b929-3e2c6ac5d8d3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1sb472k745login4127.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1sb472k745login4127.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b59ddf48-dcf8-506e-b5b0-1e8b9f8cff8d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1sb472k745login4127.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1sb472k745login4127.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f64903f9-ee61-5649-90a2-b2fcb8ef8213","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1sb472k745login4127.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1sb472k745login4127.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f48d61bf-3b86-5ad1-9d91-8f85fa169ac5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1scatterapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1scatterapp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdd87b9c-a1de-5d82-93bf-7ac592ca184e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1scatterna.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1scatterna.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ba8a4e9-f4b5-551b-a5f5-c1ad5e334a22","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1scatterna.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1scatterna.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0240ce2-1765-5559-ae9c-b18e81cc1984","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1scatterna1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1scatterna1.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5195fab-309e-596c-b0d6-d52cc999de0b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1scotia-login-verification.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1scotia-login-verification.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dbec7ad-3d7a-5b8c-95aa-a7035d50ed7f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1scotia-verification-login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1scotia-verification-login.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90449631-4dcc-5c3f-a7a7-85396d511da5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1scotiabankmobile.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1scotiabankmobile.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d37c656-d990-5187-bc7c-42c22014eb17","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1scotiaonline-verify.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1scotiaonline-verify.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6e870f8-33f7-5590-94cc-dc2e0ddeaa55","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1scotiasecurity-verify.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1scotiasecurity-verify.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48bc0943-dcba-5754-bd70-40e0e89b824a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1securebmologin.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1securebmologin.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa784e14-80c0-512d-abdf-684650d30d35","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1secured.tax","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1secured.tax']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c23d2674-b840-5048-813a-cd061396b711","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1securehost.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1securehost.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b9f34ef-dc96-5ddb-9442-24f8498fd6b4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1secureverif-bmo.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1secureverif-bmo.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61054e8f-cb74-5e65-aa06-9401b56c2c82","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1secureverification-bmo.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1secureverification-bmo.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27c549bd-432a-52e2-aead-d1b55014f2e1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1selfserv-rogersoverview.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1selfserv-rogersoverview.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9b58a10-e136-5376-8174-7005c9f47c3e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1siteofficial12.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1siteofficial12.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77b52cb6-a13e-5ac9-b561-e0cf229da92a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1siteofficial13.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1siteofficial13.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2601bebd-3524-50d5-88cc-60ed4573066a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1siteofficial14.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1siteofficial14.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6f593ae-7296-52a1-bf6a-0b1211eb9337","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1siteofficial16.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1siteofficial16.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46918570-4596-5268-a576-d1669fd65928","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1siteofficial17.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1siteofficial17.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--951db1f5-b3dc-5675-b365-ae256d0962ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1siteofficial18.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1siteofficial18.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--deb8a8bb-f8cc-5f4b-a166-b1eac5129ae5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1siteofficial19.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1siteofficial19.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bf64d57-b453-5463-a12c-592b9debdb28","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1siteofficial20.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1siteofficial20.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b495b64c-f1da-5651-94d6-e230bc44e2c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1siteofficial21.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1siteofficial21.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c536b2d3-5a0c-56e4-a912-7aaf218f4074","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1siteofficial24.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1siteofficial24.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--403630f2-d21a-571f-90f0-cfcca6261367","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1siteofficial25.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1siteofficial25.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da4253ee-e0f0-5fe0-8d8d-6147eb3a13e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1siteofficial27.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1siteofficial27.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8da841cc-ec58-5cff-9744-83590535d2fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1sssaa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1sssaa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b95b4934-1672-57a0-9872-4b724f772467","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1st-citizens.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1st-citizens.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f0b0ea5-c2af-59ff-abbc-a16596756c7e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1st4forex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1st4forex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce86ea4d-6923-5f49-9963-a33c019051a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1st4securedloan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1st4securedloan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50b054c8-25f8-582e-ba17-15938d39ad45","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1st4securedloans.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1st4securedloans.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc7ca8de-2965-5563-b640-afe6ec9849f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1st4unsecuredloan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1st4unsecuredloan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--270aef23-e7bd-5165-8268-f9fbfc692664","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1st4unsecuredloans.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1st4unsecuredloans.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1b4828e-9382-5fc2-873a-af0b3d888b1f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1stconnectmobility.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1stconnectmobility.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43dbdb60-f971-522c-8f87-e4c9bc85ac0c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1stfloorinteractive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1stfloorinteractive.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c1c5fac-6f66-555d-98ca-858cb917d24d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1stforextradingguide.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1stforextradingguide.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b5d5b49-43b7-525b-b533-1f67551aad80","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1stnewsupdate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1stnewsupdate.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b456494a-c28d-5eec-9e74-d1aa2bb064bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1stohiobatteryh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1stohiobatteryh.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7329fa3f-e775-5c69-9ca7-ed06f06592e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1ststrustbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1ststrustbank.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b1fa6d7-d39c-593a-a999-68cdd79d911b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1sttrustbank247.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1sttrustbank247.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2c93746-dd00-5fff-bd2e-3fc96c4b7b68","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1suisui.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1suisui.cc']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffa5a4a1-4932-59df-abf1-525846cf666a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1suspicioustransactions-bmo.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1suspicioustransactions-bmo.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--803ed30c-325f-59a8-8657-a743e7b2af58","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1telus1myaccount-deposit0.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1telus1myaccount-deposit0.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57105bc8-de40-5428-a792-67e46b9828e9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1telus1myaccount-refund0.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1telus1myaccount-refund0.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33bd9c7c-2bc3-51ea-85ab-1f14d3fd9f12","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1timesbackupservierses.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1timesbackupservierses.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb354ece-02c1-582a-9f32-47291e49ea16","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1to1businessapprenticetraining.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1to1businessapprenticetraining.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f1fc813-044f-578b-956a-e324e12c28fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1token.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1token.one']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d808cc27-dab1-5751-bdee-035a890dcd5e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1trustbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1trustbank.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--383d5bf9-45ef-5419-933b-3796db1308eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1trustnet.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1trustnet.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5a4e4e8-e10a-53c4-a5d4-8824d0950e15","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1ups.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1ups.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68169857-1f28-5d69-86ca-78c09a767c79","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1upsback.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1upsback.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf94c7ff-7622-5a4f-b743-0ef20fc7b37e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1v1chatting.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1v1chatting.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2321ed5-e2da-5923-bbf5-642a5b4efce7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1v3wn38.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1v3wn38.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f82e1c62-bb2f-55e8-836a-38eab3597d23","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1verifsecurenotif-bmo.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1verifsecurenotif-bmo.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dfc4187-785b-5ba6-a74f-c5a1bdbdb1fe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1verifylogin-bmo.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1verifylogin-bmo.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4288f61b-81e6-51e9-8c11-42fec071511f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1vmrbc4.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1vmrbc4.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e581f8e-6439-53fe-92a0-bedff9d4cabf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1w-token.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1w-token.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2dd2785-6a0a-5f52-9b41-5fe4ba6dd1f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-aaa-official10.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-aaa-official10.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7732a7b-5732-5177-ada6-8dd9d9611220","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-aaa-official11.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-aaa-official11.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f749afe5-c52b-5211-9855-b275742f0288","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-aaa-official12.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-aaa-official12.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c827a637-a73a-5288-9362-7fdb971bd3a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-aaa-official13.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-aaa-official13.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2334a088-4df4-5db6-8625-df4114d7c008","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-aaa-official16.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-aaa-official16.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce82b897-9b70-5de6-9153-301941d43252","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-argentina-apuestas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-argentina-apuestas.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e9a80cb-363c-5500-81a6-c4309c12a210","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-argentina-ar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-argentina-ar.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--241497b5-a0bd-5f40-afac-02c19b19d37c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-argentina.mobi","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-argentina.mobi']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d2d6872-e211-5d72-95ea-f1411277f611","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-bbb-official3.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-bbb-official3.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2d37711-5292-5a1d-bbbf-49913bd48af0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-bmo5.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-bmo5.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bdfdd75-aa7f-5190-aeca-be83e5c5497b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-canada-official.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-canada-official.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c03c750b-e8dc-5107-82ed-04e2d6f86e43","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-casino-official.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-casino-official.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da2dd38e-f34e-5e54-bd15-998877d714c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ccc-official11.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ccc-official11.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4acbf1a-f125-5740-b25c-e6ee166ac446","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ccc-official12.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ccc-official12.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14d8c0e5-0ba1-5ff7-b75f-9bf33e59e113","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ccc-official14.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ccc-official14.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e32a2bb-4044-5146-83e0-355e8d272ab8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ccc-official16.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ccc-official16.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3833de6a-0072-5489-bc40-b96ca9d3915b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ccc-official17.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ccc-official17.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2d22c3f-8d55-5665-b42c-0b2e71e26399","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ccc-official18.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ccc-official18.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba7ba785-ac67-5d47-a62c-664f3345e1f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ccc-official4.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ccc-official4.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce3fcae5-1b8d-543c-bffc-035266a0e994","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-crypto.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-crypto.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d34f56b-dcaf-5514-ae8e-a6a33a4cf122","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ddd-official12.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ddd-official12.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41fe8223-06cc-5f0c-a75e-28a8cba8ef69","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ddd-official13.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ddd-official13.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d94806fe-2754-56b7-acae-d90edc31b909","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ddd-official14.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ddd-official14.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b44e2fc-f10e-5802-9f9d-ec1dc18f81b7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ddd-official15.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ddd-official15.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49fb6aeb-83f2-5a51-8b84-48f10e0623af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ddd-official7.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ddd-official7.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b75977a-20d5-5422-9e57-276280c851fc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ddd-official8.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ddd-official8.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1a863b7-e2ff-59f9-8b02-df28c7925e24","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ddd-official9.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ddd-official9.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fca0e32-c389-55e6-baa8-dbed3cb86ad5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-eee-official20.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-eee-official20.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3ec6452-a055-568b-b796-8beb1848de42","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-eee-official6.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-eee-official6.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a2357a1-34d7-5a62-ae9a-5306296b6d1d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-eee-official9.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-eee-official9.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebe7626e-9d19-522f-ae33-833e6926632c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-fff-official11.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-fff-official11.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5b543c0-bb79-5571-a2e1-440975bd01cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-fff-official12.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-fff-official12.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff4f4c4b-dc9d-5ed6-9a6f-f4e67af3e469","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-fff-official13.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-fff-official13.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39028035-c7d1-5101-a87d-5b0efdc607ed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-fff-official14.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-fff-official14.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e796aab1-1df3-5394-918d-ae95cf9a063b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-fff-official15.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-fff-official15.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40ec34b-cf23-56cc-a031-a00e085ba436","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-fff-official17.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-fff-official17.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58a1a995-0445-560e-802e-245a01c5d575","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-fff-official4.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-fff-official4.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c444419-5313-54e3-be90-62dd774d4f30","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-fff-official7.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-fff-official7.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3af5b55-30d6-5afe-bd2e-eb689b8bd7fe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ggnft.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ggnft.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b054fa44-38c1-560d-b7ef-647e7d55cf45","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-iii-official11.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-iii-official11.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e66c88fb-33da-5694-bca4-9263d5affbd0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-iii-official13.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-iii-official13.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a4e6a33-3db7-54b6-a651-65d46c5a8b49","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-iii-official6.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-iii-official6.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--614cdd16-cf68-546c-935d-43fab09faac0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-iii-official7.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-iii-official7.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--616d803f-288e-5016-a466-a2f48c94791f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-iii-official8.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-iii-official8.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc9d6f1a-efc3-5d1a-97f8-858bae4510ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-iii-official9.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-iii-official9.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b13a6e7-bba9-5f5a-8b18-2cbe16f906a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-jjj-official10.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-jjj-official10.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28277988-0966-50dd-a7d0-f14f522cb32e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-jjj-official12.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-jjj-official12.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0693e0aa-5b20-5b65-967e-e6f8f2bdfa0b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-jjj-official14.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-jjj-official14.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8923fd2a-e4ab-5074-82f9-660ede369660","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-jjj-official15.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-jjj-official15.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6587aff2-a53e-52c4-a4e6-0ca6643bd48b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-jjj-official2.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-jjj-official2.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3bae5a3-5556-572e-8140-b885c9484428","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-jjj-official7.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-jjj-official7.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1697562-9e38-5e58-b3aa-08caeb0f297b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-jjj-official8.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-jjj-official8.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8709367b-d5cf-558d-8d06-b1b69a6d8786","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-jjj-official9.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-jjj-official9.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14b2d4c6-abdf-54c8-9113-f428151c3934","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-lll-official10.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-lll-official10.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71c50e51-c119-5299-97e8-90d8865e3414","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-lll-official11.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-lll-official11.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f52f933-b553-5586-be75-903b86dc00da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-lll-official12.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-lll-official12.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00fb61e9-c44c-59e0-8253-6f44e1927c28","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-lll-official3.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-lll-official3.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39511e3-9f70-569d-a7ad-4f158391881d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-lll-official6.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-lll-official6.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f64d36da-7722-5223-80e0-1d40db72c1a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-lll-official7.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-lll-official7.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--936618a2-4c38-5bd2-9d74-936c747f4170","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-lll-official8.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-lll-official8.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0225930e-5c3c-5b63-b9bb-8ae969a836a9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-lll-official9.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-lll-official9.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3cb83ac-f255-5b8d-a361-2f995bdb86c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-login-bangladesh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-login-bangladesh.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16227a09-7a1b-5919-ae14-08b7b66ebf58","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-login-india.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-login-india.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c73b9c8a-5d4c-5858-8f61-5a991d202192","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-lpq-official10.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-lpq-official10.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbeca7bc-abc3-53a9-9ba0-ea0cf02fcb1f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-lpq-official11.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-lpq-official11.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aade9020-9c44-5e1d-aee5-af4be2764873","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-lpq-official12.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-lpq-official12.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--116a1691-31c8-5f10-b9b6-17379e5589be","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-lpq-official4.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-lpq-official4.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cdacb0d-ca14-577e-b2ad-b23895cf8e20","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-lpq-official6.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-lpq-official6.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa3fd254-9b59-5cef-9fee-01a2d93fe1a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-lpq-official7.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-lpq-official7.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--572f1232-3dc2-5216-b786-82d3ca009ed9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-lpq-official8.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-lpq-official8.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--585ee73d-41ac-58b6-92ae-fdf58d44c8cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-mmm-official11.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-mmm-official11.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9320fa29-5fb1-5e9e-b910-15f4a831ca73","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-mmm-official12.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-mmm-official12.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39d6c162-9e84-596b-ad24-ed144aeaf861","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-mmm-official13.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-mmm-official13.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fa615ea-d2e5-5506-9d79-2d8e6fac64aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-mmm-official14.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-mmm-official14.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--087cabb9-c451-56b3-86eb-9dac39bb983c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-mmm-official15.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-mmm-official15.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc8b3d35-cd15-5221-91b1-f03e30c08f27","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-mmm-official16.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-mmm-official16.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaec52a5-3c55-5b8b-ac70-536f986ff71d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-mmm-official18.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-mmm-official18.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff649630-1f99-514a-a420-d4231e6ff16c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-mmm-official20.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-mmm-official20.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf99a138-9971-50c2-ba47-17cb5a79f62c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-nnn-official12.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-nnn-official12.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d28c9bd0-d012-5b46-999d-e6d0b7493750","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-nnn-official13.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-nnn-official13.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d86262da-14f2-5d98-9b52-d97e5b55eab7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-nnn-official14.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-nnn-official14.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28c3c447-0005-5177-adc5-33559b245c80","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-nnn-official15.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-nnn-official15.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ce464a5-c338-5c93-a505-3243a5ba725a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-nnn-official16.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-nnn-official16.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3583e23-eca1-571a-b2b8-d2c435ee24e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-nnn-official18.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-nnn-official18.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce6bfc6c-cfe6-5403-b0df-515f4ae7f89d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-nnn-official6.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-nnn-official6.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95afaf0e-92c8-53d1-bfe7-d10b2e21086b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-official-new-a.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official-new-a.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10836d62-af9b-5077-962d-4fdade0b2dde","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-official-new-b.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official-new-b.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c88d31c-453f-569c-a193-0e662e96cdbe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-official-new-c.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official-new-c.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b86ebf-40ed-51f7-9172-f55672e3278b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-official-wtm1.casino","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official-wtm1.casino']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c7bb7ad-f6b9-5a7d-a7f9-1ca0920e16ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-official-wtm1.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official-wtm1.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1366a5ec-1634-59e6-8bb8-124baa8a3a8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-official-zerkalo10.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official-zerkalo10.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e182d3f-0b49-51e9-9020-90e2abc49e96","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-official-zerkalo11.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official-zerkalo11.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d45ef68f-f82b-5300-811e-662b7d40be91","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-official-zerkalo13.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official-zerkalo13.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff4c0175-8e62-58e3-a013-8803bf841a69","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-official-zerkalo5.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official-zerkalo5.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--296bc517-bf88-5a34-b9ff-d302423e2d4e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-official-zerkalo6.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official-zerkalo6.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9bb1f00-d022-5e80-909e-ad923c495894","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-official-zerkalo7.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official-zerkalo7.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdcdd4e3-a46e-5435-a7db-146b314a11de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-official14.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official14.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff833b0b-237c-5d15-968c-7cf5abd82c5a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-official15.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official15.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3621b4f-6eaf-5c4a-b62a-a601246e7204","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-official16.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official16.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c45ad0a1-2d74-5fce-a821-ec24b873c542","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-official17.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official17.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a2255f4-742a-5553-a7a4-034fea08006f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-official18.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official18.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0ed13b1-4491-5337-9bf4-60eaffe5e824","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-official19.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official19.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d09d0d9-30df-574a-904a-aeda9d0fa5aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-official2.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official2.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44ea2ca7-29bb-5b45-ab0c-ffddedd5939b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-official20.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official20.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88d08d1b-2592-5755-8486-952933430e03","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-official21.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official21.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1ed0289-45c3-5f08-b50f-ba0622da6ea1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-official3.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official3.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac12d1bb-df01-58a8-a090-ceb33bb793c4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-official4.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official4.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82822d75-cec3-5ac4-891a-4a8c1d9d1874","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-officialniy-site.space","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-officialniy-site.space']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05238661-84db-53ac-a3dd-a35e7a42e24b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-officials17.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-officials17.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48c4e1dd-fc7b-5467-af68-16c400031fd1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-officials18.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-officials18.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebb53bb6-9360-58ed-9b6a-f20bfe11e9e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-officials19.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-officials19.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a44fcf-dbda-5636-bf9e-720407463644","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-officials21.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-officials21.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d8df25d-0a0c-5111-b35c-894a98b8fa18","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-officials22.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-officials22.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75997291-d61e-5b2a-9924-4c52031ec36b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-officials24.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-officials24.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bc2ad60-6ecd-585d-a55e-6ffa9851cf0d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-officials26.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-officials26.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdc90773-e783-5f7f-ab9d-b637fd46c6ed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-okn-official11.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-okn-official11.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c2f03a0-0015-5bce-906e-223d1cd2a3f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-okn-official12.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-okn-official12.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7f57ae2-8b77-5edf-8d3e-d45f2ceb9180","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-okn-official15.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-okn-official15.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9732a0e0-035e-5558-b512-981da52f2132","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-okn-official16.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-okn-official16.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68618d14-14b9-5e14-81b7-4818e53baebc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-okn-official17.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-okn-official17.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b1b9bb-b818-526d-92c0-3ed223d0c09e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-okn-official18.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-okn-official18.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--deda2993-eb1a-5de3-bb1b-ee08dd1637c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-okn-official21.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-okn-official21.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef5068ea-ab68-500d-816c-17a5a35b1816","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-okn-official22.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-okn-official22.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d169cc9a-1cb4-54d4-ab43-ba7bfd14c53e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-okn-official23.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-okn-official23.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a770a4a8-83fe-599f-9494-76bf67ba5517","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-okn-official5.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-okn-official5.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aaac7e9-1cdb-5488-94be-fd0ea2fa5407","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ooo-official10.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ooo-official10.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39c5e0c0-a5ff-572d-b333-64068e8f3dbe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ooo-official11.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ooo-official11.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19c618f7-48b2-5915-afb5-7f2ed2c92588","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ooo-official13.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ooo-official13.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a71a8bdd-6850-5945-a2bd-1fcc382bb3a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ooo-official15.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ooo-official15.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f72190ba-89e8-50af-aae3-1c248c13a3e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ooo-official9.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ooo-official9.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--311b4b4b-a7e4-5018-8f9e-ef453dbfd280","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-pas-official10.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-pas-official10.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--977d92d9-9810-5cd8-94aa-73a94798df01","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-pas-official11.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-pas-official11.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbef5ffd-b828-5b50-a2fb-f69abb0d0844","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-pas-official12.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-pas-official12.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39398233-6965-5c8c-a88b-9f960e4d7b97","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-pas-official13.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-pas-official13.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cd1e5ac-af1e-509f-8568-5861cb02926a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-pas-official15.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-pas-official15.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c5e29b8-964b-53bf-b9e2-18c8d872ea14","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-pas-official17.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-pas-official17.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f30b9dd-94d3-5132-a8d6-5065be66b6e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-pas-official18.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-pas-official18.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d59e8a-bb9d-5a12-8e8e-1f0be7eaedb1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-pas-official19.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-pas-official19.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83a8a809-9e60-5517-bef3-98d582fc57a5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-pas-official20.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-pas-official20.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eb5d2df-a70a-5c67-bfee-1b5c229778f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-pas-official21.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-pas-official21.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcbb42f2-7c24-5aee-a9ef-c5042608aca1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-pas-official5.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-pas-official5.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5964e9a-5d7e-59b5-998d-a40045fce038","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-pas-official8.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-pas-official8.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acb59475-5fec-5c25-95ec-599b871568be","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-pas-official9.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-pas-official9.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6e20162-3e59-547f-97b8-f8ae64111c33","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-qeydiyyat-login-az.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-qeydiyyat-login-az.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69bd5919-df49-5f18-9d93-cb636a79b959","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-tanzania.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-tanzania.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ef5ee52-ea57-58d8-b227-c07d41d44d74","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ujm-official11.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ujm-official11.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6709a5a5-9e72-514b-82e0-d218fd1afc87","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ujm-official12.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ujm-official12.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6fa0c56-8dae-51c9-978a-15f6ded8c260","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ujm-official6.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ujm-official6.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0db6dea-bf6e-590e-b77c-305ab515c217","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ujm-official7.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ujm-official7.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--107d52e6-b6b9-5634-b419-99e0002a71c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-ujm-official9.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ujm-official9.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--640a0ff8-114d-5b30-b91b-e3a9b6bcda56","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-waq-official10.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-waq-official10.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89b872ba-eec8-5768-ba1a-96f96fb5e039","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-waq-official7.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-waq-official7.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e998a86-8001-58a1-bba8-600e2e6b179e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-waq-official9.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-waq-official9.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0653296-0f77-5eaf-9386-69dc9ff97ac4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-wsx-official10.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-wsx-official10.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ffb1ae6-d495-509a-bda8-32752c26a227","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-wsx-official12.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-wsx-official12.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9cca034-39c3-5db6-9759-aad5b9e81239","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-wsx-official5.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-wsx-official5.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d38bc0fe-6990-5c04-aa33-3d41e0d8f08b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-wsx-official6.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-wsx-official6.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eb8e617-20ba-550c-9772-b0ac3fc91898","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-wsx-official8.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-wsx-official8.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c96508da-72eb-54d5-b43a-142e28c57534","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-wsx-official9.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-wsx-official9.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9747cf63-16e3-547d-b49d-839cb6d04d85","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-www-official1.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-www-official1.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd0e65fa-6ab0-513e-a730-4ab92789d6ea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-www-official10.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-www-official10.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90ad388d-5416-5150-af33-e6249d008c29","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-www-official11.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-www-official11.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62f2bf2d-6e79-5a0d-8412-34b11b35ac1d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-www-official12.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-www-official12.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a826292-6773-58d3-9daa-7e57a2b1a623","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-www-official2.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-www-official2.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--781c3570-9dec-5868-9ccc-e7f7b6116427","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-www-official3.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-www-official3.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17756793-aa41-558d-a06c-01588ba9eab0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-www-official4.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-www-official4.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b432f88f-3e3d-5279-8188-aa6f97374d30","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-www-official5.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-www-official5.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06593f98-d270-55a5-9ffe-78a3f270d9cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-www-official6.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-www-official6.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce8a42bc-9d05-5d13-b661-5984207dcdd3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-www-official7.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-www-official7.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78e3034d-3aee-5c01-b91d-bb7bd69b3811","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-www-official8.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-www-official8.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--506da43f-e6fd-5c19-9695-126a7fcf0769","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-www-official9.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-www-official9.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91686388-11aa-54f5-96cc-7dc15e610ce6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-yyy-official11.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-yyy-official11.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a5b0473-64a6-5808-956e-a34ad169580a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-yyy-official12.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-yyy-official12.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3653f32-8efe-5b77-ae7a-b366ccf34e7a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-yyy-official13.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-yyy-official13.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8791676-e1e1-5307-a506-1802137ab759","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-yyy-official9.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-yyy-official9.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--317c8ad3-2366-58ec-98e5-b5f7cef2c743","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-zzz-official5.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-zzz-official5.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db234687-37b2-5d3c-a8ce-e52462e10848","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1win-zzz-official6.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-zzz-official6.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9768edf3-01bd-5337-a17e-24020191b126","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1winbk-official13.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winbk-official13.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0377bb40-0105-5447-b7f3-c8682c21b62d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1winbk-official16.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winbk-official16.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbe4027f-9b2d-5236-afde-8f37f5f895ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1winbk-official17.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winbk-official17.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6455f2f7-5650-5f8a-b824-7f75b59facc9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1winbk-official18.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winbk-official18.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12aa50f7-85d2-57a3-971c-04ca9fad760e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1winbk-official19.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winbk-official19.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e05deda-cbd9-500e-8da7-98598c7fe5c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1winbk-official20.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winbk-official20.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fcd0911-8b77-50a2-8d6e-2c86d50d1e29","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1winbk-official22.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winbk-official22.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38f58ed3-e7e5-5918-b8fe-9fe9cf8385d3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1wincasinoofficialslots.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1wincasinoofficialslots.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f63e652-1087-5915-a379-2ce6d394a059","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1winft.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winft.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fff2b97-788d-5b6c-993c-2757d73b9376","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1wintelegram.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1wintelegram.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f21d6f-358f-5031-b18f-4ffe64018765","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1wirelessaccount-myrogersplan.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1wirelessaccount-myrogersplan.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30195800-45e6-5184-b3ad-6a995fe9b401","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1x-slots-argentina-bonus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1x-slots-argentina-bonus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd358952-e777-51f7-b60c-09a7edb6d55c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1x-slots-argentina-bonus.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1x-slots-argentina-bonus.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a267e38-e030-58b9-ae9d-0fbb8759bdf1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1x-slots-argentina.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1x-slots-argentina.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d006848-48ab-550d-9f67-3652f92926a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xbet-accountregistration.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-accountregistration.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--917853f1-83fb-53d1-ba9e-723d6e9a9155","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xbet-casino-pepe.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-casino-pepe.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18ccf8e8-81ad-53fe-be32-3627f5ec31a3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xbet-ewallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-ewallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2421b87d-5253-5baa-b770-9e0dc4556412","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xbet-login-algerie.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-login-algerie.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9eb68ee-f881-5393-b66d-92739db03347","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xbet-login-br.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-login-br.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3734fe9d-bf24-51d8-9697-7ac27884b796","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xbet-login-np.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-login-np.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e80aaa0-bfcc-5871-a27a-e7d1b8107900","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xbet-mobile-giris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-mobile-giris.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4299ff64-ed6f-5530-b844-e64a53acc1c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xbet-official-site.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-official-site.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ce46ab0-c860-5a47-a8a9-1e5d02821b10","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xbet-official.best","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-official.best']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a7bb89-68c3-5aad-9e72-d74e0e7d5c83","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xbet-official.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-official.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5916e955-aaff-5661-bb86-1bb2cbea06a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xbet-official.ltd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-official.ltd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--725633d0-9993-551d-adda-453fd64fe882","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xbet-official.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-official.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--814e0031-d996-59b3-b668-c025c046673c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xbet-officiali.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-officiali.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a348bdcc-b86d-5d41-8551-899ce781a58b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xbet-rbc.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-rbc.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b1e0cbd-763e-5a5e-9a6d-d945e8031eca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xbet-ups.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-ups.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fba0e75f-4a13-54a0-b120-b71d9a06b8eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xbetargentina.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbetargentina.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef8ad255-29f4-5101-a069-19e4ea4566c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xbetlogin.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbetlogin.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40917efd-8c2f-5000-8e7b-0ae14bb4d00f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xbetloginmyanmar.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbetloginmyanmar.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b06dea3-55c2-5749-917c-e514fec161fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xbetloginpk.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbetloginpk.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f9cb113-1b42-58f5-a3a8-9f1fa52eb22a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xbetofficially.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbetofficially.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48665f7c-b9f4-5ca3-a8ea-fcc2a2baf9a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xbitloginvip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbitloginvip.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40c5dd3c-dc68-5419-9e49-7dd642c9dc15","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xfarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xfarm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b5a7c7f-1863-50dd-aef7-d7cdbabc2c4d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xneo-support.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xneo-support.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb2e91c7-c03c-5fa2-a40e-169af2967dec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xomueamm.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xomueamm.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--228d7a86-d8d4-5d2b-b186-72314f6b568e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xslots-argentina.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xslots-argentina.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d18045a3-b05d-5da6-aad8-f89842e42dce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xslotscasinologin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xslotscasinologin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f7d6208-705a-5661-993b-200521f005ff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1xyoutube.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xyoutube.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7707b03d-b802-545e-9915-217def5df2c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1yilmazzbonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1yilmazzbonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--342acfa2-f447-535c-a4ed-9b81d614d5a7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1zcrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1zcrypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c53e1187-2ef9-53a1-85ba-2fde84c48e77","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 1zvirs.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1zvirs.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d228ed6a-fb04-5219-acb7-f02e245d8527","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2-expire-update.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2-expire-update.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d91d57f8-714c-5c21-9453-b6ef1af791c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2-newmessages.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2-newmessages.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89aa2014-26ca-5afc-bfa9-0ae0f5d995ac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2000-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2000-apple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06f96bf5-46b4-52fd-be98-0c6a5de4a93f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2000pinetworkclaim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2000pinetworkclaim.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c56262c-ee69-5879-8cd4-6089888bfdb9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 20090910.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20090910.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b5174c7-9de2-5a9b-9535-472827507f8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 201008281.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '201008281.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17f039bb-554e-516d-bfee-28e4653e7efc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2014ssasdqqhotel.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2014ssasdqqhotel.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5beecdf4-2ffb-5103-a9b9-fc7258da7d89","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2018nianzuixinguochanzaixianshipin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2018nianzuixinguochanzaixianshipin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee84883-7b8a-5b08-8ce0-957339a655f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2018wuxianziyuanzaixianshipin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2018wuxianziyuanzaixianshipin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--679cea64-706e-559b-bc7d-60ccfa06a22b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2018zuixinzhuboguochanzaixianshipin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2018zuixinzhuboguochanzaixianshipin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f4d764d-2389-5828-9240-20aec73fbe2d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2020citizen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2020citizen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edb2e3be-5566-56fe-9775-9e1192b6d861","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2021gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2021gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe9bce80-2f33-556e-b705-dc8173aa406f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2023dakarrally.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2023dakarrally.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c152a99-ef64-5a7b-bdf9-dce88c09f766","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-activities-mygovatoprepare.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-activities-mygovatoprepare.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4090d86-1654-53f8-9507-b9a8aefec2f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update099.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update099.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74205175-5c99-5470-80fe-2670811c2f19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update120.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update120.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d75f1213-47b4-5987-a707-7e5595d121f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update123.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update123.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffc656d3-eb91-58d0-bfd8-b8864169664a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update127.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update127.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3858d59-45fe-59e8-9657-c92222847685","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update128.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update128.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a0639b7-47c1-5fb1-847c-6893d917b681","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update171.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update171.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ab7dc49-aa6e-52d8-96a3-0c639ceb3979","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update173.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update173.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a69e0f4-4e70-5711-bab8-e33963b91cc1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update178.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update178.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c557b236-ca44-5d74-86d8-0e4bdf739847","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update179.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update179.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba638b6f-3a6c-5b2d-8071-aa153794ff58","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update201.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update201.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82b1dd99-18c1-5815-b161-b60c2a847379","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update202.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update202.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abb3c24c-357e-55aa-8712-ca2968dffd06","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update210.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update210.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b41776c5-012f-5b03-a202-3f91cd6bcf09","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update211.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update211.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daba0af4-0adb-5168-a233-bde884c97bbb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update212.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update212.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb6bb4f2-6b5e-5131-8f4d-78675eac0d10","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update213.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update213.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf5b236c-b188-5754-8ad7-213008b773ef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update221.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update221.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--847c640c-b65f-5bb1-bb03-2c7c8f9986c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update240.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update240.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1531136f-ce45-5e4c-b019-54591d2c67db","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update287.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update287.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6aa361d-77fe-5403-89d8-d704f2935abf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update289.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update289.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f85fa74b-5e12-5454-b7ca-d996b430ce48","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update298.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update298.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d79fb20-baf9-5e96-baee-895ec0ab77ff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update439.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update439.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b3529fd-8986-5fd8-9736-ec94ac1faf17","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update450.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update450.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45f74734-42ac-5950-a645-c72046425b20","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update477.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update477.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d57a522-d260-5057-bf2f-1d4be745af9f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update528.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update528.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11d6731b-3998-5d07-a522-2da1d5a70ca6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update548.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update548.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6161738a-4dda-51ba-8477-c0f3da55a986","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update549.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update549.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b51da656-506e-5eac-9cfb-705cd7ffa722","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update572.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update572.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b18b3192-34c9-5729-9674-a0a12c5c0db0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update712.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update712.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39439e3e-28ad-5e91-8dc5-68828db4cd85","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update742.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update742.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e130d63-5bab-5582-8ff8-c2b0dcce4161","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update745.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update745.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dab5143-8780-56f9-95ee-ab3eed81765a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update770.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update770.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f904c33-a6e7-5cbe-ade6-eddeb0347195","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update777.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update777.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2370b1c-4ebc-52c6-bca3-41621a16e68b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update780.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update780.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c12cb3fe-7753-544a-9356-b04f8d33ab71","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update789.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update789.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1415f2f-4006-5a9a-895f-78626ea0551a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update810.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update810.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cadbc55-d903-52d7-9205-84a32ca1294e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update815.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update815.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0f1ad2-8c2f-5d83-95ab-6122a3e4c220","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update827.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update827.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--916aa6c8-e14f-55f4-bc15-e904b574fca1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update892.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update892.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b592d671-eea4-59a0-9534-a1eb00712130","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update894.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update894.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf2e260-8f05-50dd-abe9-96a489bbac5b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024-update928.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-update928.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5b6a2e0-021c-5a04-bd33-d23ac393d074","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024electionbattle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024electionbattle.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0a1292a-9f5f-52bf-be7e-38591c4091f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024everwisetcu-28.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024everwisetcu-28.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--041a6891-214a-580a-a07e-0384ed5235a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024helpaccessclaims.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024helpaccessclaims.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84911c21-4822-5362-bf71-765501b4a939","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024mygov-refunds.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024mygov-refunds.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9edb8d6-d054-5861-8467-99ffd447d0f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2024update-lhk.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024update-lhk.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43c18110-6ff5-5d3e-856a-ebba8fab0014","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-canadapostdelivery.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-canadapostdelivery.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9875a0c4-0e49-5001-b1aa-cf202720be71","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-medicare-advantage-plans.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-medicare-advantage-plans.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d6f3419-7055-575c-b3a9-7395fe916591","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-newmessages.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-newmessages.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45514ffe-b299-515d-b617-3a904469ce0b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-sparkassen-tan.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-sparkassen-tan.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b82a7841-13a4-575b-902e-b459f2ad4f71","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update093.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update093.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3dc5f56-c44e-5158-8437-8e1f86db8f1b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update104.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update104.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01806b51-2f51-5514-97e3-8788af73e190","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update115.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update115.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99555d8e-07b6-587c-b254-ad9cb6937516","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update12.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update12.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71bbb6d0-e046-5b89-88a8-dd11fce3dee7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update129.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update129.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d602f76f-9af9-5097-a8d4-ddf33cfafdbe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update159.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update159.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd547e62-87ef-57da-b750-21153545933a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update190.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update190.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbba721d-a687-5641-b8da-a101bde0506e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update205.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update205.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b395b08-b2c4-5611-94c0-6b4559c36b42","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update24.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update24.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55adbdf8-0a76-52ff-81a8-8e9be0267948","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update25.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update25.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35b00aa5-0f07-5722-98bd-266d5274884c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update26.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update26.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15c25e95-8f75-5ff2-8af9-297f867af85b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update277.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update277.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ee84924-8479-5564-9abb-f2fd6de9e8b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update277.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update277.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa7535c9-16b1-5be0-a5ab-3b4f7cb707a7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update278.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update278.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0005caa2-9bb0-507e-9dce-4f17587b8da4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update278.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update278.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b674e7-2424-5216-bc9e-568fd26cb5fb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update279.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update279.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b8238f6-4e59-5356-8a37-d0de4f0cc3ac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update280.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update280.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecd97ba2-8c93-553a-85df-461ec2890c69","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update289.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update289.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1a012bb-5076-56d9-903b-aead4e6d42f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update307.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update307.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--577d253c-a809-5cce-b1cf-14e56992b6d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update377.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update377.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6158376b-e0e7-5470-b40f-9d1235caf99b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update421.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update421.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b73ed0d7-99b6-5986-a244-463ead4791c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update455.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update455.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ea4066e-6705-53aa-a88c-5ad86ebe1a19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update47.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update47.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--760223df-dee7-553e-b666-414f3e8cede8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update752.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update752.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0578d98-8ec3-52f9-97ca-c5175a8aa00d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update829.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update829.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e32314b4-f66f-5b3b-8535-d68b6aad18d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025-update897.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-update897.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad435c89-942a-5ee1-84c1-72fc11797675","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025basens.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025basens.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--549f256a-1747-5e3d-981c-1566ed26b6e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025businessassistance.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025businessassistance.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c494c620-0579-54cc-a443-a9175fe8b01c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025claimactivity.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025claimactivity.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1f8ea61-cd21-5095-b870-f017921e4f77","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025connect.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025connect.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a66c041e-0990-5ed8-b804-49b0336df28a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2025first.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025first.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d33f7894-01a7-5d73-8b3c-4d81caea87ef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2026-update223.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-update223.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e5cb8d7-95ad-5288-ab8f-af03c77952fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2026-update414.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-update414.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7453a35-86b1-504d-8fab-c017042b2b53","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2026-update617.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-update617.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ac073f-c01e-5361-bd91-51a222b20d7b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2026-update627.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-update627.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c89c99f-1566-579c-a755-3ac235557e0e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2026-update878.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-update878.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dea6505-4cf6-53b8-b5cb-bd1cbf37b400","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2026token.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026token.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7902559-1aec-5797-b53f-e177db8bfe83","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2026winlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026winlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--634348a1-3eaf-5b71-a42e-6aa41a3d072c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 203support.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '203support.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdb70676-365b-5d07-935c-6830e573d8c6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2046ssapi.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2046ssapi.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b7e43ef-f44d-569c-afcd-3794f5465abb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2048-monad.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2048-monad.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42b53273-8a47-5b74-b36f-54daff0ef65c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 20att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--060d1b9c-8d3a-5f4a-9e68-8050f56c62eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 20betargentina.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20betargentina.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffb79eab-083b-5fa0-a95d-5d408de648c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 20betloginj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20betloginj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c27ae92-8aa2-55af-98ea-a7925522d11c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 20betmobile.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20betmobile.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fba4b664-733c-5606-83ab-de04dd735d77","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 210104coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '210104coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65d3d9a3-fc52-57e8-8456-9f8b01ba22a9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 212133coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '212133coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c49b2e4-f04e-52d2-8072-0da92f03e89c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 212493coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '212493coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4010372-7992-507c-ae65-e40ad20cbf75","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 21326.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21326.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bd67318-e4c4-5fb4-bc9e-031df3976005","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 21413-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21413-binance.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bb68391-35d6-5679-9e1d-2fd10e81ed97","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 215720-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '215720-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e1447a6-dc86-5e74-ad82-fa567a50106e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 215secure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '215secure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb79f088-5451-5536-ade2-6a18ca3e7fe2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 216135-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '216135-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ef9f098-d719-5eec-86f0-aeeb63db4fda","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 218969-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '218969-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57123716-3ecb-5b17-9946-ee607510eda2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 21att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d74ff6b-3a54-5798-9f9a-517358f8b078","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 21clubstattoo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21clubstattoo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac828ad-65ba-5bad-b2b9-5a3e05547abc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 21millionbitcoinshow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21millionbitcoinshow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1815b05b-1967-53f2-b7cb-cd860813dc53","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 21millionthebitcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21millionthebitcoin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31a2bf26-d89f-5e97-9cc6-3444be536767","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 21millionthebitcoin.show","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21millionthebitcoin.show']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea89bbb3-35fe-5949-81f9-c5f47b4a1e1b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 21millionthebitcoinanthem.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21millionthebitcoinanthem.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6464033a-e25f-5426-8820-545653e08f97","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 21millionthebitcoinanthem.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21millionthebitcoinanthem.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--392808ec-a8ec-56d3-a753-1e40fddae048","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 21millionthebitcoinshow.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21millionthebitcoinshow.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7bacf1a-d777-58d3-8f78-496d18acf411","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 21millionthebitcoinshow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21millionthebitcoinshow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3501a57-7440-59a2-9898-64e7a9792216","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 21millionthebitcoinshow.show","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21millionthebitcoinshow.show']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb59a281-197f-50a8-9e14-963f99878ac4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 21millionwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21millionwallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2373adb0-29cd-5953-a909-b700358f1b3e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 21omer07bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21omer07bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6866f08e-b015-5a7e-8fa1-fa37c7a79ac2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 21pineapple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21pineapple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a47511b-283b-5a7a-87be-bc7f9db01cdb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 21pineapples.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21pineapples.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb0548e4-808f-51ef-9d90-56d702f29de6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 21stupdates.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21stupdates.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e00cbb94-33d1-522b-b759-91c65b9c9ad6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 220582-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '220582-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--903d32e2-01e6-53c1-90ca-fe101e8b3401","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 220vault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '220vault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a10a8edf-0937-52bf-84de-7b0777d2ea1a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2216first.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2216first.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed23209f-a75e-5c9e-bc98-902fff80ba03","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2222bet-login.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2222bet-login.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10ee11c2-877e-5add-a076-5a2a32717903","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 222betlogin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '222betlogin.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2225f28-9041-50da-a5d8-88d4a7d76fec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 222upsilon6.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '222upsilon6.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--598010e8-9894-577d-a843-852098a3027e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 222upsilon6.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '222upsilon6.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d645e65-6a54-564e-8403-57b0eeb9542b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 222upsilon6.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '222upsilon6.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a25fb59-371d-5f98-9fc8-231fd1d16dfe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 223244-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '223244-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6109e425-62ed-512d-be51-05920570e1c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 223sui.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '223sui.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cff32fd9-9fac-50ab-a9bd-5de887100ed7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2256-base.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2256-base.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90d5993c-a2de-5687-a72e-3fec9c238e96","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 22aaatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22aaatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0d5c3a8-6221-51b5-b68a-20b65a4873f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 22aatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22aatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56bcc9a9-0e8f-526c-a68d-da3a9c77da00","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 22aattt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22aattt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a9fbc0b-151b-5454-8da2-2af77e4ecce9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 22att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--293e6f3f-a515-53c8-9f6e-ba661a3fd983","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 22bet-login-pl-amp.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22bet-login-pl-amp.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb0a9239-90dd-5d56-bb8e-0cc24d490470","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 22bet-login-pl.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22bet-login-pl.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1faf28f1-b4be-5ea6-b9b0-dac97ffda015","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 22bet-tanzania.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22bet-tanzania.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8192672-99a8-59ac-838f-01cd9a77deae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 22hello88login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22hello88login.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a443a44-6367-53dc-9380-746ced38f6ad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 22rainbow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22rainbow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef33cf1c-1e81-578d-b235-64cdc17bd8af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 22scommessa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22scommessa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--907bdc7f-e78e-56c2-9f7e-5c4ede9cdf3f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 22ssaa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22ssaa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f38da29f-847d-5524-b23d-da12701f4da0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 22viploginwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22viploginwin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ad8c8b3-52b7-5fab-a294-13039944f0b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 22winlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22winlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a2507e0-fa17-5d7c-ac0d-01792f96a636","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 22yy6.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22yy6.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d03fbc7-e444-59e1-9a98-c1e7b872981f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 232232-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '232232-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7cb9f53-ccc2-5687-ad9d-f4c3b06f9dfd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 234683crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '234683crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--653d5ffd-f9a5-5cfc-89d4-bdb031977f6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 234sui.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '234sui.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7945b8c-99f7-5e0b-b5af-987da549657a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 234viplogink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '234viplogink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e60b572-1e61-54ea-8432-64388916ccf8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 237459-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '237459-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb72a936-b9b5-550e-8c72-02d6b795c098","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 238765-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '238765-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9e48883-2b34-504c-8361-5c8dd75047be","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 23apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23apple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52a0d7db-ce3a-55d7-b7a5-3a85680029e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 23betloginj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23betloginj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8878a0e-abb6-55af-8a2e-7865766434ea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 23rootsfarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23rootsfarm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d65109c-4899-579d-a95a-7040029d4e76","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 23vinlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23vinlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9693e45c-2c85-55df-b2ec-4c402c110ef5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 23win1login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23win1login.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79e90d10-2648-5026-ad71-5d63f6261a78","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 23winloginwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23winloginwin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--375e4469-a311-56a6-9a3b-5abc9cccd0fe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24-7-essays.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24-7-essays.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d448e0d-cf1f-54ca-8346-e5573c33e026","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24-login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24-login.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a44feb2-e5f5-5c8a-83ff-c2e05087fd25","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 241543-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '241543-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5043664-64c4-5caa-981d-6ee7ff909702","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2420rainbowfalls.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2420rainbowfalls.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--770f9feb-36ca-56d3-9bdb-9ca70e4f7948","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 243459coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '243459coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4a6c0cf-7d7d-573a-9f71-f1d930743bc3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 243928coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '243928coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1b04845-508a-59fd-8902-8cfaf988440c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 244938-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '244938-icloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74ff3882-b8b1-5258-a91b-9a30bfc03559","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 247-support.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247-support.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db846078-cace-5664-bd55-c4d37b5be9d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 247302coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247302coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60dc886f-a0bf-5f04-823f-04b7f39738b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 247billingsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247billingsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--631a8d4a-f0d1-51c5-a9ca-94eb7ba9901e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 247billsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247billsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bf9f438-454b-52fb-907b-b5f140677dec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 247cryptotradeinvestments.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247cryptotradeinvestments.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c9145a4-74e7-517e-a05d-c00cd362015f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 247destockwinner.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247destockwinner.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a2ee1c7-ef10-5f09-b5c0-6d99939b009c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 247helpsupportcc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247helpsupportcc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43fbe349-2c0b-59de-99d3-54a33d13f550","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 247hookups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247hookups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fb58421-8267-5cde-8974-013f1770387d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 247newsupdatez.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247newsupdatez.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c61ad22-7760-530d-9e20-a8ed2b967305","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 247softwaresupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247softwaresupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4b465b-47be-5d94-ab21-4238b8658052","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 247supportbill.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247supportbill.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2177f8b7-2ddd-57b7-ada4-18ab9ec3c693","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 247supportcs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247supportcs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ff04da9-4a2f-5cf4-a37f-d0d645adb3c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 247supportnetwork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247supportnetwork.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2f88ffc-1742-5ff8-bc9a-639bfd7caaa3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 247supporttech.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247supporttech.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3206bf0-7e61-5df1-8281-233e32842f71","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 247trustmarket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247trustmarket.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83393522-17d2-59e1-9a44-dfdeb5cc81dc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 247trustmarkets.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247trustmarkets.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f90dfce-2810-5ed0-8d4b-f58a325d8613","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 247wisemen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247wisemen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c686b913-388f-5f74-881f-59aaa0241651","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 248495t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '248495t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26201a7f-3257-5c66-874d-2ca3249da87d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 249379coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '249379coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b78096-0a30-528d-8f81-0b21d1a910a9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24connect.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24connect.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41fdf856-9528-54c4-8754-df7ecc257bf3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24essay.tips","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24essay.tips']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cfb4f08-5343-548e-b3be-23a095bca0d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24farmait.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24farmait.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd6f54a-90ae-53fd-9de2-d2727b0e6f29","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24gallerynft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24gallerynft.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c310018-8c6c-58cc-a7b6-ce5749d1c975","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24h7dtechnicalsupport.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24h7dtechnicalsupport.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37f8a4c8-387a-565e-bf69-edd242a7f7d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24haffiliate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24haffiliate.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c813295-5923-5051-8493-06e4aeed81be","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24houraccountant.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24houraccountant.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d11c7e3f-8896-5633-bb5b-61d87192148c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24hourcustomersupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24hourcustomersupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11f4eb05-860e-59a3-b6c2-9f4423d36fe8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24hourforex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24hourforex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f04b255-2826-5b65-8d64-54ce1a7d76ea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24hourssavings.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24hourssavings.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0421e740-8bc3-584e-a81a-8cf5342aa405","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24hoursupport-tards.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24hoursupport-tards.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dca7c5e9-1989-5cbd-8010-3eedef816eb8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24hourvisa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24hourvisa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21e5ba3b-e05c-51d1-a9e3-d50789b9faa2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24hrprudentmobiletire.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24hrprudentmobiletire.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8307da6-a708-574e-8c9e-fc82a9af89f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24hrs-forextraders.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24hrs-forextraders.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3f900eb-0e8d-5cad-b111-19a7c99e57f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24hrsforextrader.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24hrsforextrader.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27d7c6f5-7527-50bd-83ed-7c6d3f5fca5c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24htechnicalsupport.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24htechnicalsupport.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9085d84c-8605-5883-b3ce-f7597e4be220","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24mysupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24mysupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a7a160a-2e73-5879-832a-f38f5632a14b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24tradeforex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24tradeforex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba66991e-78c4-51db-b11a-cdec35631594","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24whatsapp.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24whatsapp.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--391617c5-2495-5666-a049-dc672e34f6c6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24x7crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24x7crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4406239c-328e-5466-90e3-d662ebb66a2c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 24x7serversupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24x7serversupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c62bdbb8-db55-52f6-8d6d-80c32fc0dbdf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 250wordessay.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '250wordessay.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d03a5804-2cd6-5995-a092-de68cd887606","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 252184coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '252184coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d43f21d7-9cf8-5393-93d3-f72d5962380c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 252533-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '252533-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a339ad5-e53c-5da4-8ba9-7ed07904e152","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 255983coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '255983coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad152a3c-6931-5dba-8961-2af59c16d098","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 256web3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '256web3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0cd5c0f-9f24-521c-98f6-c68bd6381f81","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 257905t-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '257905t-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca2573ff-e442-5776-8faa-3d2207db53e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2587925coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2587925coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78669830-94f8-5c3a-bf09-68e5387fde4b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 259302-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '259302-kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e97eee3-fb3a-5662-b96f-cca08648bbfa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 259816-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '259816-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8c05121-65ab-537d-8d12-24e0c5e98ab9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 25badmintonrindonesia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '25badmintonrindonesia.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--988de460-da76-5b01-b250-d8b27a6b7feb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 25badxmintonrindonesia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '25badxmintonrindonesia.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f17e2df3-57ed-55bb-9a5a-ac86b84f2d6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 25firstavenue.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '25firstavenue.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1bfbbae-d343-51a0-8bab-2f74a0322290","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 25novansko-connection.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '25novansko-connection.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d2b1b9-e9b0-5c18-a855-92def0bf9c54","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 260samplessale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '260samplessale.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63b6f3e1-a4f7-5d1e-9e14-3ccd78c17dc2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 261537-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '261537-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3b2d7e5-8519-5587-b183-dcfd16105eee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 264coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '264coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9503e02e-11c2-5db0-af36-8edb82029714","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2680964coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2680964coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcabda49-d429-5387-b3ec-f0aeb6b70790","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 26betloginj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '26betloginj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3af7d23c-7500-5f96-be50-de2aba96b8c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 26gjm.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '26gjm.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7956ac27-cd0f-539a-a3ce-62db8dcbb0c4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 26ssa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '26ssa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--024d8d15-fe9c-5784-afb3-905ba19ad227","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2718ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2718ledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27459256-663d-50e8-96b6-4dc791a3b487","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 271951-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '271951-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89bbb5e1-2bbd-52c6-8d71-949ccbe580cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 273581-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '273581-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4beab218-21e3-52e6-8fda-0b526d1bf51e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2738958coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2738958coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c2372e-6d42-5007-9547-abe72e519a45","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2749325coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2749325coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff7ac69a-b6b4-53c8-9ce9-b964e3a30203","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 27642-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '27642-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6b2ddbb-513d-5275-9c29-f88392d9598b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2767login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2767login.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed1aeafd-214f-51fe-9686-8c39e0c658d2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 277mxq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '277mxq.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feb1ca69-5240-58de-9146-552947c1580f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 277mxqx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '277mxqx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--367645b0-eaf0-5713-a870-315e30892e03","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 27874-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '27874-ledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0328fed3-2caf-59ae-aba1-dd056ce6615e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 279136coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '279136coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--865861b2-0213-5e54-9e8d-f7a7a9999df8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 279136t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '279136t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6e0fe2a-2f2d-52f9-8db9-1ce89ecdc635","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 27bayrambonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '27bayrambonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99961671-4e1f-58b8-bfeb-eb88e0cdf2e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 27northconnection.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '27northconnection.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2c66c24-65cd-5c2d-bd6d-f0c56eeda3d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 27rogerson.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '27rogerson.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c662c0cc-02fc-5f6d-8cff-bbc138e5e4f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 281721coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '281721coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ab03a9b-4274-57b3-82ed-c7cf8655b897","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 282721coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '282721coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49984e01-f2e2-5998-badd-24b1db860318","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 284365-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '284365-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2df8f39-038a-5d0d-a258-6550111983b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2847291-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2847291-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2394adc5-247a-59c7-8bd8-d8f30666a6d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 285795t-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '285795t-kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24d74405-2e85-5d40-9be5-a1bf165a854f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 286149-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '286149-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce1d69a-3fdb-5d7f-8731-1673a88017f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 286923-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '286923-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db79a2d7-836f-5f0f-8f5b-f86142f6c822","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 286ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '286ledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7deb4f0-3a45-5cfe-a6f5-5b3b2b1179d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2876ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2876ledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0763b486-3442-5ec3-80a3-a7612a038117","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 287979coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '287979coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0928fd93-34f7-5263-ad3f-6eb04e0ec010","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 289036-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '289036-binance.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b14ef0f-0be0-5ffc-aaf1-32a32d1c9f35","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 289winlogink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '289winlogink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c1e5f7-1f1b-58e2-823b-d3fa8811d8c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 28betloginj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '28betloginj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1abf0d4-c0b3-5313-9b22-480ea0103a6a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 28betloginslot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '28betloginslot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21432997-ef8e-555b-ba11-7fbd851ef6c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 28glogink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '28glogink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b9bfaa6-3792-5a90-a4a8-751220939175","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 28login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '28login.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--791884c3-60c0-5b90-b0cd-d5d1e860699c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 28wallets.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '28wallets.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcc3e958-573e-520a-8f8d-6cb48eaf3e79","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2900betlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2900betlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a791a0fe-8b46-5707-8838-aa5dc0f9bfe7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 290941coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '290941coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6499da5d-88e1-584f-a187-eabee59ff75f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2937384-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2937384-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b746e8b-f86c-5256-8e77-2b3adba15cc4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 294173coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294173coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc97dc97-c443-5b5f-bf5a-b019bfc2c6ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 294178-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294178-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed7fffd4-b994-503f-96e2-a09c3b8372a5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 29473-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '29473-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea51af3f-abd3-5c61-a111-fbd8ed6c3ef1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 295051coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '295051coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dfa3b5b-8207-5a97-9c94-32969906c4b4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2961-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2961-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02294b9-f9ce-5507-a098-9076b59489ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 297053925ae4.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '297053925ae4.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--882f6612-e8f8-5fe5-a0d5-17f797bde2ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 298654crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '298654crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e05b4b14-b4b2-5a42-b9e8-045c79a5760c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 29betloginbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '29betloginbet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b0920de-737a-5c85-837b-2e4efb98a042","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 29dlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '29dlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebf8f2a2-e9a9-5492-932e-f1c87000c73e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2acccessmyrogerspayments-review.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2acccessmyrogerspayments-review.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--799488c7-ad6a-5a02-8193-8503baee3166","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2acitizen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2acitizen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a42ac8a-3e30-5b6f-8b4e-49b59f26b05f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2appeal-rogersnetwork.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2appeal-rogersnetwork.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fb9d97e-e317-5814-b6c7-473ce46f1b11","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2appeal-rogerswireless-mobility.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2appeal-rogerswireless-mobility.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21dfb3d2-5612-5991-ae28-b763149ee908","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2b2n3b.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2b2n3b.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97d9e6b5-6967-57de-bdff-daddcc32e2f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2bill-myrogersacctspayment.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2bill-myrogersacctspayment.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3113c776-65cc-5c57-9ac3-57575b005146","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2bmo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2bmo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--323e76f0-9c14-595e-a05c-58890b300036","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2bmors.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2bmors.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fc6ea7b-5d62-56f0-8cab-4b97e5d989be","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2bong88login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2bong88login.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72245ea8-be2b-50b9-a90d-d9d8de51ee98","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2bongloginvip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2bongloginvip.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7f8516b-b7c7-5982-96fe-47efabbb841d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2bridgeio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2bridgeio.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f560c6a3-a5ac-5fe0-beac-b609783b3a18","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2c4x7z.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2c4x7z.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf1a188e-fa24-5174-a6e1-aaad08d55367","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2c7m4r.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2c7m4r.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdfb3671-4a22-5e7c-a195-17227993d5da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2ccatt.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2ccatt.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c18989af-0bc9-532c-8ea9-520f30a73ae7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2ch-d.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2ch-d.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4662cba8-9087-5aec-a2c1-a035f672b19b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2claim.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2claim.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d5f5c43-c436-5ad7-8526-ede1a03247a6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2claimprices.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2claimprices.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e140a93a-6e13-5d28-bf40-530f5fa043f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2claimultimaterewardhaven.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2claimultimaterewardhaven.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc4a2b01-0d64-56ad-9937-76ae0ecad5e9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2crowstattoo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2crowstattoo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe333813-2685-5995-ab81-902dca06c412","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2dashboard-rogers-user.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2dashboard-rogers-user.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b85adb01-2efb-5dc2-aa0e-117afad63770","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2dkb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2dkb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52967b14-1e65-5941-8106-c79249490902","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2dkb5h.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2dkb5h.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d72bbe8-ab52-5d5c-b0e2-fd2e6eb9f934","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2e8077a6147b.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2e8077a6147b.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bfbd677-1846-58b5-b66c-88d2c840c850","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2fa-citizens.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fa-citizens.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2192980-64ab-5dee-86ab-902ed8500cf0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2fa-citizensbank.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fa-citizensbank.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--789c2150-5f48-51cb-af8f-b5275f10d073","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2fa-esl-org-message.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fa-esl-org-message.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e48744d-1399-5633-8bc9-0d46be8f1043","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2fa-esl-org-verify.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fa-esl-org-verify.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0c17160-afd2-5115-b29a-e2b4c0b90b5b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2fa-esl-org-verify.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fa-esl-org-verify.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c063149c-86e8-58da-9e90-f5cf252857aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2fa-esl-org-verify0.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fa-esl-org-verify0.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cf867a2-14ea-5003-abc8-94c62c84e72c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2fa-esl-org-verify1.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fa-esl-org-verify1.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48d65663-11ca-507e-ad69-715a758cf0e9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2fa-presaerch-account.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fa-presaerch-account.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--475ef320-e5e6-556a-9957-6b16bfb7d849","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2fa-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fa-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48e60d22-9085-5284-8af1-0c21bd608121","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2fa-secureverlvy.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fa-secureverlvy.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--438d558c-7bc2-5201-ab93-7da4bd61e6a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2facibc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2facibc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed0f4a8a-abd3-5227-b05b-4f7d5c3ed884","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2fapinetvault.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fapinetvault.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97a69d82-de01-52b0-8ba1-a8b8d1782182","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2faplugin.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2faplugin.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44bd937a-325b-5516-890c-36d7df9302af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2fasupportdhl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fasupportdhl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ef2f75a-8e9f-570c-ab9d-9e413ae6ea6e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2h7h3bw.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2h7h3bw.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d4ea3ab-f374-52c6-ab66-35e33a462c7c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2hgmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2hgmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f095d80-1cd1-50fd-a07a-3c9c2071f85a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2i2o3i.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2i2o3i.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00bb1628-5cb2-5ead-913f-52f675d9ece7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2irse1.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2irse1.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0575e2fa-5e9f-58ef-a22d-9bebc1103bba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2k9ws.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2k9ws.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d42a2b1-b285-58e1-bda5-148ea4830c13","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2llllogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2llllogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--872f8698-8f62-53b7-9215-3b76e421c6de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2login-freedom5g-mobile.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2login-freedom5g-mobile.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23d8e612-c0f6-5c16-aef6-de344bf94de5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2login-freedommobiie.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2login-freedommobiie.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2e7edbc-6aae-5ebb-8101-ba6251574049","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2m5c.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2m5c.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b523d400-279d-5e7f-ad03-1c0bb8872f9d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2m8k3x.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2m8k3x.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--922e0172-a1f3-5638-a8a6-f535473ca741","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2manage-acc-rogersbill.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2manage-acc-rogersbill.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21ce18e3-b0e1-526f-89e9-4a19208878dc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2mintokz.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2mintokz.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36397dc5-490b-5bbe-81c1-aa1f5f98c950","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2myaccount-rogersdashboard.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2myaccount-rogersdashboard.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b21197e-7b36-58aa-967f-dfa48fcc9b0a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2myonlinerogersaccts-payment.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2myonlinerogersaccts-payment.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fac77175-6312-54b4-8351-9227ba18cd55","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2myrogers-accessingonlinebills.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2myrogers-accessingonlinebills.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa60816a-b40d-5035-9c07-fab1faae5e7d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2myrogers-clientcare.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2myrogers-clientcare.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17048feb-539c-5381-ae4e-a6659d71ad8c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2myrogers-manage-pay.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2myrogers-manage-pay.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a465048b-98b7-5d34-a82d-024d9315a359","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2myrogersacct-dash-payments.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2myrogersacct-dash-payments.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bb3e717-cc4d-5e2e-81aa-f6b27326d288","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2myrogerspanel-summary.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2myrogerspanel-summary.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81983781-b9a7-59b3-802f-b6103a7d4907","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2nabcw.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2nabcw.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfb442aa-6d72-5ae3-95b9-ff6b5ebd8677","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2ndgreenrevolution.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2ndgreenrevolution.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ccacc15-7d1d-5837-bd86-30be1be7f275","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2ndwiseclub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2ndwiseclub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41d8a517-add3-506c-bf11-37c9598e07ec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2ndwiseclubs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2ndwiseclubs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb3e9682-f480-54ba-8412-e959960e7f08","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2p9x4r.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2p9x4r.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d965f2c-ffc5-5809-90a2-fc8ae382ec01","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2piratebay.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2piratebay.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ae58716-8ca1-5883-969c-07a5020ec4af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2pk7vzr.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2pk7vzr.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3805f810-8775-5c8b-9d1b-b8f81ae4aa97","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2qdanz.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2qdanz.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aa70b80-bd55-5774-8461-ed7cd92c00be","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2r7c4m.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2r7c4m.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--252d3d79-0964-52be-b05c-1443508c04e6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2rbc5j.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2rbc5j.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1abeb362-5750-5cf5-9e22-9f08e0dd9bd9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2reviewmyrogersdashboard-access.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2reviewmyrogersdashboard-access.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15e193e-c963-5bb1-8f21-5018ce6f5587","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2rk7wpz.skin","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2rk7wpz.skin']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ba65848-4c0d-5588-89d3-5218fa0dc84d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2rogers-communications-center.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2rogers-communications-center.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7e72e32-e473-5dd1-9246-c4db1d4208b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2rogers-onebill-update.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2rogers-onebill-update.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--977c9a9f-fef4-595b-87c3-cc75d1f199e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2rogersapp-clientreview.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2rogersapp-clientreview.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc55dea0-8eab-5270-9d2a-8b5d4eecb26f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2rogersbill-accountupdate.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2rogersbill-accountupdate.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffc01dd1-b934-5845-ae9e-cf9913f87081","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2rootsfarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2rootsfarm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8a13dc2-eb96-5d32-b025-cc22064503c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2scatterna.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2scatterna.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c87403d7-5cdb-5ae3-84f0-ece058352837","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2scatterna.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2scatterna.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c826b971-da8d-510b-a9b4-2f8ffe28d73c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2scatterna2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2scatterna2.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c162fc03-96cd-5ace-9471-f97c539941db","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2secure-freedommobile.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2secure-freedommobile.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401bc178-6375-5e0f-8c21-a9afba4014d2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2secure.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2secure.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--312c1446-f005-5b7b-a18e-c0e99759f356","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2sexa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2sexa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84701a31-de2a-598d-8f8b-a3eee89b57a1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2shiba.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2shiba.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eab980e-358a-569b-bd2e-8dd8cc144cc5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2sisterssalsa.art","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2sisterssalsa.art']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02cf177d-11b8-5af6-8d22-f16259c0032f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2sistersssalsa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2sistersssalsa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d1cbf72-40e5-5c18-a2fe-1c68f56fc1e2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2sssaa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2sssaa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39c40649-3254-52ea-be95-6f00acf542f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2suisui.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2suisui.cc']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa6f438d-a18f-5fc8-93cf-ce0c7af182a1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2thewhitematter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2thewhitematter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16763144-eadc-56b7-89ef-a294638b3da0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2thewhitematter.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2thewhitematter.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a85afdc-1f43-5666-b6d5-e0fde79b5023","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2treasurevault.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2treasurevault.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e87cf68-0063-51c2-a2e1-7a626c8bf4b4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2umups.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2umups.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--271c678c-d68b-5553-9bda-185f43cb1f7a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2upsfz0.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2upsfz0.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7401ff09-cf7c-5ac3-8500-af28c247f365","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2via-pagamazonas.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2via-pagamazonas.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--096f4aee-a31a-58bf-8e37-221c67c285e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2via-pagamazonas.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2via-pagamazonas.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c70919c6-f21d-5342-a5d3-9beb321036b9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2wirelessmobility-rogersplan.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2wirelessmobility-rogersplan.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bd6eaf3-da75-5681-b8e4-4bec3b459d82","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2wirelessrogersmyplan-terms.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2wirelessrogersmyplan-terms.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2c9419e-b6a2-5972-b943-e3851a3b2fae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2wisek.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2wisek.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73f7fb6d-fefb-5260-bcfb-ccaee934269f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2x8m3k.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2x8m3k.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2d837e2-1bd7-5500-85fa-fe4c63ba90f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2x9r4p.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2x9r4p.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10f83b52-9baa-5bb6-aa5f-6b6b01f467ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2xcustomersupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2xcustomersupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8db0ef2e-ebe2-5257-928e-e3a394c5ca28","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2xtoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2xtoken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fec26a6-d9aa-511b-abfd-562193c2585a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2y3tg2y.skin","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2y3tg2y.skin']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd550e29-1fca-5a57-8771-03ca6e742268","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 2z5k8w.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2z5k8w.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d56ba42-e0e9-5ed6-88c9-ee433f8e7246","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3-patti-guru.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-patti-guru.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0493cb02-56e2-558b-8728-da9ceaf8a8aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3-patti-lucky.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-patti-lucky.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaa07913-e4fb-5792-9e7d-567d1e726368","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3-pots-bonanza-wild-frames.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-pots-bonanza-wild-frames.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a01cb340-ab1b-50a4-ac17-6bd63a4fc4e6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 30-day-free-netflix-trial.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30-day-free-netflix-trial.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06172d5f-d2f5-55c2-86a8-bd5a690de130","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 301alldomain.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '301alldomain.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e0e6003-4116-5929-a763-ef1d4f03b22a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 303stripe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '303stripe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--554fad29-8234-555a-b722-385b40216fcb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 30547coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30547coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd3fb0ba-1c75-5d0c-927b-210eefedb0af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 306113-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '306113-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47891d49-a3c9-580d-940d-e368f686453a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 30att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f50106e0-f16b-5fcd-b432-610d424b59e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 30betloginj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30betloginj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a19f6288-95a6-5ddd-a5ad-3dbce4e59c7f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 31-stripe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '31-stripe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26066b1b-0fb6-54d2-97d3-7a0d215f8cca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 311946-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '311946-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b2153e8-2d62-5a6a-98e8-964c284e9c3c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3124-ionos-webmail-login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3124-ionos-webmail-login.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d97a7b0e-263c-54f4-b3c2-2e2c2e87ae2f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 312betloginj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '312betloginj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13d834f0-19e1-57fe-82e6-a76089e9c778","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 312reconnectnow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '312reconnectnow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--692ed773-6a11-5fdd-9885-155218eb320f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 31495julianafarms.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '31495julianafarms.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8380391-1cd4-5db6-b8c0-dae03a00e65d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 317317.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '317317.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2063324a-e479-55e5-9a1b-5d883f63317f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 318bet-login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '318bet-login.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--183b03bb-4e24-5930-942d-643d1b6963b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 31ahmet31bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '31ahmet31bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--748021b3-60e9-5f77-9dfe-3422a99469a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 31att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '31att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b44157d-1765-57a2-87de-d03c4c6b9dba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 31pensionasuindonesia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '31pensionasuindonesia.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8562d6c4-d786-5ee5-9376-9f64f4b98848","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 32-stripe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32-stripe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60337f8b-0284-5784-a9bd-1f7e11c19f9d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3243-claim.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3243-claim.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--686f1c3f-a216-5891-81e5-fa1c355d934d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3245login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3245login.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ae76b81-7ae5-52a0-a1b7-19e1b3cf66a5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 325195-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '325195-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5159bd43-7182-53c6-be2e-f547cfe515a1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 326916coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '326916coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22d1735d-7120-5fd9-81e3-6f4b6958eecf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 32891-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32891-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aac7bf07-a5f2-54cd-856d-4e8dcf61fef8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 328977coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '328977coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0bfc349-a6a5-5f11-9a99-606acbf30bd4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3290549coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3290549coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47880b4a-05f1-5462-9ddd-0578e41fd424","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 329854coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '329854coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da6a93a8-6a24-502f-a2fa-f55478c793e6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 32att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--616132c8-b485-5277-b317-c075c0247917","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 32suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d22e4d4-807a-5645-b6b2-a8f75939164a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 32win3login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32win3login.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49ae1af6-c89f-5545-bacf-b7262d968a57","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 32winloginwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32winloginwin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ec56202-f72b-57b3-9fb4-0a6a2c7b5944","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 33-25-39-1-microsoftazure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33-25-39-1-microsoftazure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--732b4e3b-f896-5b4c-8dda-60c5eb1eee6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 33-stripe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33-stripe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e43cb15-740f-5536-87f3-559e907efc9f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3333tokens.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3333tokens.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--070b7675-63cc-5ec3-aac9-d2a0f39793e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 333vinlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '333vinlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--719e58f4-9d18-5a0d-9178-48c413e71b50","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 333web3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '333web3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32303a52-6295-577c-a1bb-f63a44b3fcbc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 335261-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '335261-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40d88d81-68ed-56b7-aad2-f12e8382cab6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3355winab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3355winab.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ce97131-93b9-58c2-b20e-370cecdf00bb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 33aaatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33aaatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--134129ad-46ee-58f8-a4a5-593373aee323","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 33aatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33aatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6a9e365-38e2-5b9c-96b8-f65e8c7f3845","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 33aattt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33aattt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b5088b5-a8d7-5d53-85d8-77c4254bc1f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 33apk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33apk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51b74630-891d-57bb-aabc-6e47c33cce16","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 33betlogin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33betlogin.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--171d3581-85f6-501f-87c7-6e070621b5e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 33bmonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33bmonline.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3279bc1c-8349-55c2-aa47-276c0049f7e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 33k99p.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33k99p.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b01c669f-0e74-5cd6-899e-da77a9d4a497","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 33k99p2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33k99p2.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaa54d7c-469a-5bec-a956-833b2a105c4f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 33kinglogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33kinglogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59e0bd8d-2f58-50fc-af48-b92e2abb2168","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 33layerupdate.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33layerupdate.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d66eb11c-16be-5bf0-9758-f425bd9a7faa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 33rbca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33rbca.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ee03b1d-24d1-5cf9-b20f-ca0d9775c816","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 33ssaa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33ssaa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b72fb16a-a954-5ba5-a37c-db79b7884562","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 33vinlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33vinlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d04e3ae7-1652-5190-96af-e8722dd8a759","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 33win02login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33win02login.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f2f0f8-1db8-5fee-937e-9b4afdc1d399","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 33winapplogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33winapplogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b54fe713-7ca6-5fcf-9326-52f8d9e22d24","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 33winloginapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33winloginapp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13c89b21-43d2-5158-8988-e57c43d087c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 33winlogingame.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33winlogingame.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b61b3b-2d48-56e0-9816-e173f3d0977c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 33winloginlink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33winloginlink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf98ad7e-2292-50e6-a1a7-718d1561ac1d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 33wwinlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33wwinlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfae2aa1-6a63-5d64-9af4-c21385b04164","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 341829-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '341829-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45c78774-554b-5a1e-8e12-cde9fe159468","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 342874coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '342874coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c6507da-49cc-5800-b97f-800301450f2d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3444zz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3444zz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb4f809c-c116-5085-954a-c77c2f5ab385","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 347542-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '347542-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2ffca41-85de-5c16-8a37-7b09d7b27732","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 348287-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '348287-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--208406ff-9b00-5d5f-a687-54796f82f1eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 348409-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '348409-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2feefa49-634b-51f2-aaa9-4a54c07d8b77","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 348wd7etbann.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '348wd7etbann.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--176cb61f-cbb9-5cc5-95cf-41697e3bdec5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 34rbca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '34rbca.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e5a9e45-80e2-5235-bb46-3eb4714e0fa4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 355759-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '355759-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9c90932-531c-59fa-b31d-ce7c06bd3e95","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 357web3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '357web3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69f8cd78-df40-5395-afed-7b74e3aab7d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3583coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3583coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecf8c57e-c1dc-5e7d-a0aa-e0ac0fc53833","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 35abmo.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '35abmo.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3a12adf-d157-50cf-9e40-aa42b683dc16","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 35hayalet35bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '35hayalet35bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a8d6f55-9edf-5eaa-aaa7-d8f3da0b463e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 35xv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '35xv.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07a599f-5805-50b5-9da9-5124639e1c5f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 360accountingpro.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '360accountingpro.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4f21380-598e-5021-8b6e-4c511db6b6cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 360autossales.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '360autossales.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b54f0778-15d0-5299-96fb-6fd4c74daf61","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 360cryptobank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '360cryptobank.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c5247f8-8033-58b4-a526-3dc848045a23","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 360cryptobanking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '360cryptobanking.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c6347aa-6ee0-5186-93c5-1122d2e7c72d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 360cryptocoins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '360cryptocoins.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41aea810-45d7-5b19-a4cb-703a8c8a34c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 360goldsuit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '360goldsuit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46358a1b-b93a-5786-8e15-25eb9ecb5ca6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 360goldsuite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '360goldsuite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a64e4266-dc88-5b41-938b-1dba40083e8c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 360lodgesuite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '360lodgesuite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--674ae20a-9834-564c-999c-3713c6114f1f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 360microsoft.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '360microsoft.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25045bfa-f70f-5e51-8ac5-e557d5620cdb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 360popunderfire.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '360popunderfire.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--504c6bc8-64d7-51a8-a6fd-457de0bfa93a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 360updater.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '360updater.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7d10f41-5647-5d86-a9f0-0b5b39207973","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3618solana.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3618solana.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43ae1069-edb7-5612-b19b-c4613d946121","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3633betloginj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3633betloginj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--077bd1f8-8051-5dbd-bfc2-89518c403cef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365-bonk.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365-bonk.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bc5684f-d2a1-5fef-99b0-aa52b2b1a21f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365accountant.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365accountant.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9523b82-efe9-5eda-ac6d-a25853f2cac1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365bestbuy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365bestbuy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8a687f1-ae61-5e75-ac26-82750354e0c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365betlogin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365betlogin.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a73eca0-2789-59bc-8d46-52f2b5fbc01f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365billsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365billsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--380b46ed-935c-5ce0-9cc8-a5e44ce08465","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365cacuoclogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365cacuoclogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--120e6292-1ede-523e-b710-ff1202f5c89b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365ccbillsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365ccbillsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7454a38e-1314-5435-a64f-ae2d365f64da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365connect.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365connect.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ac7647e-c516-5c06-ab0e-df6cbcf0080c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365helpsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365helpsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b99fe86e-68ba-5d19-8338-14ea42bb09b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365irelogin.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365irelogin.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41f9cd25-746d-53fe-99c0-75a8910dbb7e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365japanupdate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365japanupdate.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4d4ec56-8031-5d08-8427-4652f940df8f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365locally.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365locally.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--277b0af6-988f-512f-84d5-ee5cea155fc4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365loginoffice.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365loginoffice.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b75d146-bdd4-5cb0-b6d7-971a63f019af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365oklogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365oklogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--519e5145-5c50-5708-bbd9-130cc61c41c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365okloginbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365okloginbet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cbfc3ed-8b13-5fcc-828d-14423a8d3d16","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365outlook.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365outlook.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c7983d1-9bd1-5d86-a2dc-8dfd2aff4333","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365remotesupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365remotesupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b08b2448-4fda-5354-b603-10e82d86be95","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365securefiles.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365securefiles.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3416636-d2a1-5710-91ee-3834fc96024a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365secureit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365secureit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--833aae12-277d-5536-a657-cedc6832f84a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365support247.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365support247.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c2897d-0da0-57ae-8e93-6bc63f984525","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365supports.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365supports.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d0cadd4-156b-5d53-b5ef-4bde1f4fcf48","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365techvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365techvault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beaab466-864b-53c6-8b36-f1d833dac604","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365tokyoupdate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365tokyoupdate.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bc6b310-bb98-5571-82aa-d1cfc86ae8e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365tom.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365tom.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e6af4bd-b0e9-511a-be4f-f9b1534fc401","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 365zhuanzhuan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365zhuanzhuan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66c19d19-64b1-55d2-9fc2-a46e95136dca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 368betlinklogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '368betlinklogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d769914-4fb6-5a76-b9e4-a2d3fa6c2ada","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 369369.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '369369.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2238e70-a71f-581a-a9d3-72b9af24e80e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 369superslotlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '369superslotlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47a7176e-14d0-5e2a-b4c4-c124c40976eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 36att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '36att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57de9e46-02e0-551b-863b-9c0fe11698ea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 36tlogink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '36tlogink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1643bfd1-f6b9-54c6-9b97-d9a6d91f7b8d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 36wincasinologin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '36wincasinologin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17407e01-3a26-52ff-8efb-a5e80bdcfba0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 36winlinklogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '36winlinklogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3be9e17-d788-5278-b608-768967b99a8f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 36winloginslot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '36winloginslot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83d43784-8ad8-5f6f-89f5-1ec588adf609","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 36winloginwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '36winloginwin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6803d807-38b0-5805-9afe-89902bc8cef9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 371094-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '371094-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f8dd0d8-c3b6-579b-8435-607b05c4815f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 371095-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '371095-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07ae244b-971f-5423-b19f-ed83cfd97714","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 371957-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '371957-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcc88c8a-6298-54a8-baf2-455d6c6c1f46","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 371brllogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '371brllogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6625409-1c67-5327-9fce-12d875f023e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3726att.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3726att.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0df77c63-0bf3-5fe0-941e-4307e12a4abc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 372849-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '372849-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eff2a8b-fba4-5a80-ae8a-69ed58c93f09","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 373458-coin-base.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '373458-coin-base.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e607eba-ced6-5f4f-ba99-eb4cf3f140d0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 374819-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '374819-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--926b6d76-f4f2-5f5c-8ff2-2615ad58c150","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 375124t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '375124t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdbc3805-1f8f-5c85-9817-54a435bd86bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 378101coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '378101coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--199c86b8-3d58-5f52-8dcc-447447a0b165","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3785203-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3785203-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15b886f5-dd98-5eb9-a5b1-9ddb1356378e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 379153coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '379153coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b372aa42-dcb7-5cbc-8a52-d89db60c861b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 37alogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '37alogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e8e31e1-7eab-5454-9cd5-551f57de9a14","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 37att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '37att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96d9c2f0-4336-5f6a-9978-6c3985544019","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 37f584aea34d.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '37f584aea34d.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80a3ae95-5060-510e-9f82-30b3bb05a5f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 381328-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '381328-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e256e631-177c-5d3f-b09a-b41fb604f2d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 382470coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '382470coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2f9bacf-acb2-52a8-9f90-2d4153f37367","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 384271-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '384271-kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc7824e8-8d1a-5f9c-98a9-c547fa31699e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 385158-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '385158-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70204924-e4ee-5e5f-a769-376ef22d0a91","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 385betloginj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '385betloginj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81f09ebb-00e9-548a-93e7-0aa64510ef1e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3861wellnessfirst.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3861wellnessfirst.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cc72a52-e75d-5333-b823-e7b830a3dbdf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 388384.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '388384.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--960795f0-8987-5910-95f5-4c9fa83d27b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 388goallogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '388goallogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b43f97b4-a784-5bef-8a93-4cb983878515","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 388hero.bio","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '388hero.bio']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81e1350c-9b0e-5c7c-922d-d98b6d2d9b71","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 389winlogink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '389winlogink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81144b21-3b4b-5001-b642-5ca79f2098d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 38f5wvwwn7o.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '38f5wvwwn7o.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af0307ba-cf2a-55f1-8a6f-01e514d607bb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 38suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '38suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89c9c99a-128f-5644-af84-2934c178b436","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 38thailogin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '38thailogin.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b74390a6-7536-5b48-8c82-58f16c7772aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 38thalogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '38thalogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5b931b4-fce8-5d2d-bbf6-68b881f0761a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 38thlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '38thlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e8fe764-052a-5d1a-8323-e38a86002616","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 38winab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '38winab.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b77819ca-466d-53dc-a7f6-5ee9da66f73e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 391021-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '391021-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b083bc-73f8-56b9-ae3b-e796c6f60d9b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 392680-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '392680-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeaa361b-af1f-5ef9-ab2a-81fa55cd0a5c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 393betloginj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '393betloginj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecc88520-892e-54db-b664-0459fb2fa9ed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 39478484-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '39478484-google.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc06998e-d151-590b-9faf-cedbf0c086e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3954-coinbase.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3954-coinbase.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e5aceea-2216-57e9-9a7e-74d0f3b8b47b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 396520coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '396520coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25ed7a13-46d8-5815-be74-25914b4c3455","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 398621-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '398621-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02f594ff-f578-5caa-9f44-08e139c358dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 398786-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '398786-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c951536c-a46e-572b-a51f-eb5a7b92c387","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 398834coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '398834coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e54071a-51f4-567f-8b9b-0ae602f66422","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 399339.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '399339.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6352cbe3-7bb2-5f9a-9e9c-a1cd051ffa45","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 39google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '39google.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b166e8c2-2332-5e83-b1d2-f9353490ac86","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 39login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '39login.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--369aabc5-2bd8-58e1-afd1-3db489ed4652","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 39mpt.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '39mpt.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63d3208f-b63c-533d-9e77-f7639dad78b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 39suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '39suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d76791dd-3a2e-55be-a261-43ee5dfc3f4a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3a3-interactive.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3a3-interactive.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4267830e-fa9f-5de7-9a53-89c45f53a61a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3aaanft.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3aaanft.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80a0f8bd-8449-5153-90cb-5d02c621bbdc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3acresfarms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3acresfarms.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb6c58e-bbc8-589a-8afa-9bc2815ee53a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3amexgz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3amexgz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c706bcb4-3edd-5850-b55c-c36099c5ddb8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3angelsmessages.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3angelsmessages.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40d2ad0c-bd48-5f2d-a270-335104eeaa7b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3appleplan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3appleplan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f99abc59-e0a8-5fe4-93ad-00c9c047057a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3assaly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3assaly.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b6ae34f-1aab-55d8-aa44-a1d615570a4f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3assas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3assas.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af0f8c83-1b8c-5904-8a7a-b1293b19ded7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3attd5.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3attd5.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--582c659d-045f-59ff-af68-07d2f4f45d5c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3b873f2412cd44efec2f2c1fd468773e.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3b873f2412cd44efec2f2c1fd468773e.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0936a3b6-208b-5848-9c38-453dc9a7f327","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3bmovm.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3bmovm.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b7ec6e8-49e0-5e71-8475-82c00b645cfa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3c7h5b.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3c7h5b.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b200473-5194-5ea3-80ca-c97d803ad9d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3cconnections.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3cconnections.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a24c2cfb-6e89-5d25-9c8c-07da05362460","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3cupsphilly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3cupsphilly.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2b304f0-be7c-5cc7-b3a5-a1d8da77fa13","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3cupsphilly.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3cupsphilly.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48734b1b-6caf-5b4c-89f2-e819c5b5f537","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3cupsphilly.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3cupsphilly.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95dfc271-c57e-5db0-b386-b368d4e61933","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3cxbackups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3cxbackups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39afff79-2484-5b3b-9094-91142ca921e1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3d-crazy-cattle.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3d-crazy-cattle.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c3f6914-b1a6-55c6-a3e1-81b863636e0e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3d-hd.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3d-hd.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d3a45cd-4e6d-5185-882a-884aecb82d8e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3d-secure-pay.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3d-secure-pay.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d34512a-91dd-5032-8b7b-b17418f1de0b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3d-secure.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3d-secure.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90194cb5-d6f1-50b1-bfe3-d7a777b6718d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3dartwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dartwallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f45add3b-3e2f-5907-b5f3-78d4e84793b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3dayscrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dayscrypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fb06585-e227-56af-9b4a-1312977db010","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3dbetlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dbetlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca15ada-b75c-579e-ac8c-37ea2ab87618","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3dcgvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dcgvault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69194e4c-0c80-5abd-ae6f-2b8a84ee638c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3dctoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dctoken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a007938-f873-5cbf-95ef-8429c6227843","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3delctronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3delctronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bea9fd7e-65c5-5025-a70f-6043835645a7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3dfarmlab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dfarmlab.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebfb0601-04c0-5c58-bb3f-381ff9bfe438","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3dfilamentshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dfilamentshop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--822558fd-d0b8-54e3-be77-a7a830c801d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3dh24gfk25er62ted13.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dh24gfk25er62ted13.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa81d674-d77c-583d-9afa-74e69c6c0a54","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3dkb59.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dkb59.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a491ea3-c2fb-5245-abf0-a94ebe73c179","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3dmodelbridges.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dmodelbridges.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa48ba8d-1634-50f0-87f9-e4cd57f84836","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3drevolution.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3drevolution.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86f31e56-29ea-5dee-b338-bfd85b75a0a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3dronin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dronin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1040273d-3b19-5a3e-870f-ee3e92b79e33","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3dsecure-ca.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dsecure-ca.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--309c21f5-61e2-55fe-9234-9674174249bc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3dsecure.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dsecure.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5187121d-bcd8-52bc-a76a-c02ec194fad0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3dsecurepayment.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dsecurepayment.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7256966-0370-5221-8930-88bb885eddaf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3dsecureverify.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dsecureverify.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33e0fb90-f0e9-58a9-b00d-c1ab22bbde19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3dsecuritystripe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dsecuritystripe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e48b1118-bbbd-52e3-9d3d-04960474580b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3dsecuritystripecheckout.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dsecuritystripecheckout.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a0d56d3-9269-564a-bc1e-952d9add61bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3dstripe.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dstripe.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8adc7af9-5d68-5a4c-866c-4a4c3d68510c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3dsverify.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dsverify.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4295513-2f91-5934-9e6c-ce46559cecbe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3dtechmart.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dtechmart.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c337c229-b4d7-5927-a758-8e9f707ef20c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3dyanzheng.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dyanzheng.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--542e3b11-ac4a-5c08-a4d3-79f31f1e170c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3esuite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3esuite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2932aa43-e454-5752-9661-46327fd87777","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3fmint.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3fmint.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e880ed7-3ad3-55bf-83c6-bd8da5abf174","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3h6t.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3h6t.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09755065-3504-5160-ad38-82ca2010d59e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3h7b5c.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3h7b5c.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b441088-8c63-5e41-81a4-6001190c9048","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3haoapple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3haoapple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3418aa8-dc9a-5c0b-b606-e476d0dab070","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3hotchillies-argentina.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3hotchillies-argentina.win']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c77819-25af-5491-b9bc-76414c0810df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3ikj3vg22.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3ikj3vg22.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbfdd2a5-ccc3-5c3f-a5ab-8fbba7597d4e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3itrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3itrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e306e1e-87be-5347-987d-6e9c19350eac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3itrustapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3itrustapp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e38c043b-c08e-5534-9666-2f4c7ad6243c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3j8n9t.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3j8n9t.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed8f530c-6197-5922-ba7e-1fae54a2fbc9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3k8uj3.skin","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3k8uj3.skin']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38ad7a4f-6cad-5c20-a717-97c9ea956ceb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3kautologin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3kautologin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5883dc51-688d-5885-9073-47e9fda88bb9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3kdubailogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3kdubailogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c353196a-ea1d-56ec-949e-e909c156cd8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3kingloginvip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3kingloginvip.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68b03eb5-2a0f-50ea-9b22-6a5891eac62c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3ltron.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3ltron.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef6bc535-55ec-5300-ac65-5c7623d1e0e6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3m8p9w.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3m8p9w.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9fa8c5c-3a36-5c58-aab8-00eb775cc97a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3mainaccount.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3mainaccount.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74c59e2b-8c0d-5fbf-be0b-a9d15b26b66a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3mg6aliexpressdlm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3mg6aliexpressdlm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5816a8d1-578e-5df8-9434-8222971f677b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3movssave.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3movssave.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--536b19cc-b238-5c3a-9d4e-e8cb09c9a765","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3n8t9j.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3n8t9j.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ba32941-9964-5a59-9d19-a453267118da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3nab0l.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3nab0l.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1af507ec-7c8e-52f2-b4b4-8681b10c88b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3nabhz.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3nabhz.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70707590-5097-5d6a-a5de-de9f6588ba63","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3ofheartsmassage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3ofheartsmassage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c77a6d-01f7-5f06-afc1-08bacee777a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3p4m7x.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3p4m7x.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--866dee33-2d13-5fe2-85bc-036d5ca00723","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3patti-gold.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3patti-gold.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afb2f0db-5d01-57e7-9f4c-80d9140c192c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3patti-guru.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3patti-guru.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d07d8ed-4c95-542f-a28d-6e4790c0598d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3patti-pakistan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3patti-pakistan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09c2d8a3-7634-5ea8-b20a-6438535920dc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3patti-teenpatti.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3patti-teenpatti.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05947f43-2bf4-532b-a291-37999126020a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattibattle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattibattle.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40b9c2e9-a2c9-5dac-9ae1-dbe800774599","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattiblue.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattiblue.cc']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c16dc96-2423-5bbc-afc3-3ed64fc989cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattibonus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattibonus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99c5752d-2291-5dee-b2d6-1b48862bbccc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattibounty.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattibounty.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--107ad1e7-ab68-597f-a432-5937473d653a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattibounty1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattibounty1.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eaa4006-7135-5340-add8-1ebe380cfa3d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3patticlub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3patticlub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e43b80b6-0f8f-515a-9ebf-71c60a14685f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattidaddy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattidaddy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f566a90-c171-5cbd-98de-40a9fee78609","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattidistrict.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattidistrict.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e73332fc-4520-5fe3-a473-dc1751f63903","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattidragoerecde.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattidragoerecde.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab122b8-215f-5927-9003-338c186da2c6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattidragon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattidragon.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ec9aca-0315-574a-949b-bf7d0b1e2c6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattifast.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattifast.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ada565c-9534-5796-9fde-430e2794a77a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattifast.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattifast.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0f89d33-129e-58c3-ab84-522d75891510","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattigamers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattigamers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ac16ad4-77b5-5718-92f4-7e2ff599090f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattigood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattigood.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2103e0fe-e477-5a16-90fe-6f8a37a44733","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattigurus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattigurus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--945ebede-757f-5eae-bd19-8177e5b21c25","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattiinfinix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattiinfinix.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ea875cc-8097-51b3-97de-f10aef417fce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattijoker.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattijoker.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8711938-5c23-5a1c-8c6d-7ae466489e94","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattikhaadi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattikhaadi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8e4a9d5-8316-51b6-8da9-45dddfccce4d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattipearl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattipearl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c1eea07-4ae5-5b66-b5c2-9956a52a411c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattisky.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattisky.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb4d2a3f-7533-5cf0-89d0-e83a312ba838","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattitiger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattitiger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--955dc531-4c98-5135-b48a-e399c3ea9462","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattitigerclub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattitigerclub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4efc29e3-dfe8-5b39-941e-30ea096b7916","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattitigeroercc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattitigeroercc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3d96244-0ca1-509c-a5a5-b6e87dc311cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattitiktok.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattitiktok.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f2fc062-d10d-53f3-917a-47a49ff9ea0f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattiunion.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattiunion.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c141b4a-00ba-5701-a7bb-5ae214f7debb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3pattiworld.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pattiworld.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df5e585f-3293-555c-a3ae-e56f9aa4e182","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3patto.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3patto.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c8979c2-b208-52d2-8137-c06b5b46127d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3prconnect.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3prconnect.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--698684c6-13bf-56c2-85d2-2ea1404650b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3qtw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3qtw.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea8a19bc-cc3b-5662-8ee6-4a2289031982","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3r8d2k.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3r8d2k.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2ebd29d-c481-5974-a9b2-f72d44aeaf88","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3rdpartyregulatoryaffairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3rdpartyregulatoryaffairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e066f585-ff6f-5cdd-a4d6-100d9fbd92f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3rfm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3rfm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad0a851d-9706-5d36-a533-6f5aa78465db","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3rmicrosoftit.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3rmicrosoftit.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f312636d-12b9-5c8a-ac13-924d65e6a7cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3s-farm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3s-farm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33ff2b1a-d3b7-516b-b65b-c1b80b59a977","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3scatterna.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3scatterna.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0540f93b-1f89-5488-aeb6-4af2bc876a94","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3scatterna.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3scatterna.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97b2d34c-e3fe-5f5e-b241-478aa27cc188","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3scatterna3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3scatterna3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72b35aea-f7a2-5c88-9f44-552a03e37cb4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3sssaa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3sssaa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--184c3f6a-4f25-5cdd-a6aa-24730ec18a2b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3suisui.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3suisui.cc']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bda4d16-60de-5b9d-b2f8-993183b80f5a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3u7h4h.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3u7h4h.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99965ebd-a2e9-5ffc-9d29-8bcf9e9a632d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3ullsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3ullsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dedb0c71-0c01-57df-9365-d9a648e405c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3upsj6ev.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3upsj6ev.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--472280f0-2067-5282-aa90-bcd77d9eb7ac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3urbcmc4ntcg7.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3urbcmc4ntcg7.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75914ca2-3dc5-587e-982e-ab3023bda000","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3uuwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3uuwallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--819e4729-ddaa-532e-903a-779725ae79e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3v3ryfr1d4y15p3rf3ct.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3v3ryfr1d4y15p3rf3ct.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e007d92-01a0-5cb5-8831-00eba0d2a95e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3w8m9p.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3w8m9p.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea844a77-bafe-5c37-a44e-2182cbdcf00b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3winloginbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3winloginbet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16b23b69-9f65-5062-b4b9-a1dcd38b6c19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3xchange-login.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3xchange-login.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e707aba9-0e73-5c43-a399-024f84099a54","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3xchange-login.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3xchange-login.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16924aca-b83f-54a6-aaa6-bb4dd1d04803","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3xt9mkv.skin","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3xt9mkv.skin']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d09a8f-39a0-56b3-a39b-87180c78d8f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3xt9vkw.qpon","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3xt9vkw.qpon']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72d99a25-a9e7-5a9d-8fd4-e3727cafc804","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3y4ye5.skin","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3y4ye5.skin']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8237e4a7-a24b-58d2-a21c-f071b7e61d5a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3yke2rbc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3yke2rbc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928c70db-8387-55fa-80c3-bf5bf5c38245","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 3zw8rkv.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3zw8rkv.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d261e7c-d099-5774-b4ba-6e62cbd6e227","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4-dayou-microsoft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4-dayou-microsoft.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e177b304-5a1f-5855-bd2d-9d64bd7dcf4f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4-jin-microsoft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4-jin-microsoft.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8783e45-88ef-55da-bf5a-90574775d1fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4-qian-microsoft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4-qian-microsoft.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fff7385-db1d-5bcc-a523-22bfafadf46a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4-sheng-microsoft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4-sheng-microsoft.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4373bc-7840-528c-8c85-31658bd4d5df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 400northfirstst.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '400northfirstst.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--909062e3-4d5f-552d-a24b-efded02d5f2c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 401k-fidelity.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '401k-fidelity.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d3d607d-5308-550c-970d-6c264b96af37","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 402933coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '402933coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d6a0cbc-834e-5583-9352-f6c6ce164627","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 403478coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '403478coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36d8c9e2-c46e-5d15-a936-f9abc0bb7eb2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 404111.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '404111.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff2e8429-a698-5529-a53f-57559088a355","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 407etr-account.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '407etr-account.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcaa30ac-56ed-58dd-a917-9ae8d79e3238","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 407etrconnect.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '407etrconnect.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08473516-84ac-5b42-b6ae-b9cdfb870637","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 407etron.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '407etron.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75ab1cc8-221d-5377-a352-b8409ec1c140","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 40accountinginc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40accountinginc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b230a0c9-cb51-56fe-87c5-d015780bff2d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 40accountingtax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40accountingtax.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efae8801-3d10-59ab-8bd8-ff0fefab897a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 40att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9836aae-8130-54eb-8a0f-24cf8de59fa9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 40shiningrainbow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40shiningrainbow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c4a7e5a-5ecc-5d85-9235-ef4ac9bfebee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 40wattclub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40wattclub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e842c5fd-2a16-51ab-95d9-6a601f7442d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 40winab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40winab.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa0920b-879c-5781-9312-348749262b70","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 410153coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '410153coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f8d1f86-e16a-5b4f-a183-7337e8af91f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 411connection.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '411connection.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea40f49-08a9-5f4e-bafd-3626a0395cfd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4120firstview.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4120firstview.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01cf513e-8335-5ae4-ab36-cf22f3ab4159","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 417invisalign.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '417invisalign.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f43d5e9-7d69-500f-ade4-ccad2d349bd5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 41829-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '41829-icloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2715a1bb-f6ee-55c6-aed7-ff5315bda15c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4187243-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4187243-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3c4378f-0129-54c6-a918-d669c506413d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 41kclaimpay.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '41kclaimpay.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1522b9e5-7be5-5304-af61-7529b151b007","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 41token.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '41token.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78c76900-06bd-5b49-ab8c-4e34ef272cbe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 420budcartsprerolls.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '420budcartsprerolls.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd6b3751-60e8-575c-b4e2-479bec0c257f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 420cannabisstore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '420cannabisstore.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--440aa445-f2e2-5cad-9800-3eb923effe0b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 420cannabizshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '420cannabizshop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80a6d918-3170-5a97-9d6a-ba54473489bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 420coinonsolana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '420coinonsolana.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee987bf4-ec6e-5d2a-b844-7d4641b85e3b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 420rally.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '420rally.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82418c88-00c3-53c2-ade4-c6bcc2960a04","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 420seattle.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '420seattle.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfe169f8-699b-5a8d-a6c4-32061decd0f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 420tetrahydrocannabinolvape.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '420tetrahydrocannabinolvape.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebd4a613-f7dc-5763-aea1-f108853d6e84","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 421295coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '421295coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5721f430-aef1-5b50-9538-f964ef7a132a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 42143-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '42143-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a10087e-091a-5095-a613-92ed11b5fac3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4218094coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4218094coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fa91762-a2b5-5876-bd48-572b7f1fef20","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 427387coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '427387coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe116e3e-30ca-507b-98e3-ff24851cf1e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 428883coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '428883coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11da7962-1eb9-53e3-8971-28dc15c40f05","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4289054-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4289054-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4978a330-79c6-5744-b708-c5846357c36e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 428945-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '428945-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b50d45b-2fdd-57c1-9020-bc77b8fd6435","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4290137-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4290137-gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d97652ea-2941-5b09-a477-42a063045d9d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 429805-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '429805-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--214c3415-59df-5e7f-8e28-e3a8b42ce682","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 42dhlx.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '42dhlx.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68fb0e35-faa8-5800-83d4-02ea26889b3c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 42ssa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '42ssa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98b5487b-454d-5fb7-9f0e-061851b402a7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 42vnlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '42vnlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42e224be-0e58-5bf2-bb1c-d22a4d84379c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 42vnloginbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '42vnloginbet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42ef0677-95df-542f-9e69-f740fcab7824","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 43000filesl.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '43000filesl.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d18f2cce-1f37-5261-a1cc-396574aba2e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 431337coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '431337coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2b711cc-9da3-5cf1-81f7-dc65ff33c77f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 431994coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '431994coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39bb5f3c-30f2-5cbb-a9c6-1dd11ef8be0e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 432btrz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '432btrz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28c19f92-396d-559e-bb4d-231785aefaf0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 435407coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '435407coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb6ab191-01b8-5940-a448-a9f1f5fbad71","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 43543g-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '43543g-gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c84d730-56bb-5401-aeb1-62962110efb4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 436737-bankofamerica.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '436737-bankofamerica.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3ebabbb-6e79-5a73-a316-e4971e010692","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 436737-bankofarmerica.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '436737-bankofarmerica.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d4f11c2-7baa-5781-8010-23f733b7cf6c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 436737-chase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '436737-chase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f92064ce-37d3-50d7-8747-08dc18bd2c60","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 436737-wellsfargo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '436737-wellsfargo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93153e3d-0326-57c1-9603-cae2e2390772","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 438914-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '438914-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f05e8a39-7238-5775-b06c-245592d7e43a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 444ssa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '444ssa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b393a25-6625-5397-b7dc-9b2d116c62de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 444winlogink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '444winlogink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45b1739c-5ee4-5740-9381-29ea6f583107","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 445sui.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '445sui.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cfbd183-29d6-50db-a5a8-cf80fcbf8a8f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4466clublogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4466clublogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37da18d0-b189-58ea-9e81-7ed4c7785b89","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 447419coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '447419coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9069de0-1acb-5bad-8bc0-5995df436cca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 44aaatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '44aaatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faeecb69-9248-5bc9-808c-db306231ca75","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 44aatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '44aatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dec8b9e-f99e-55b5-9b83-f870dad0b9bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 44aattt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '44aattt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b03e34f-08ac-5ab6-a7a7-7acdd6edb236","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 44betlogin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '44betlogin.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bcb360f-ebd4-5d3c-be9e-9668894234b7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 44qqlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '44qqlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e774368d-0ec9-59c4-a611-e25d6e286859","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 44ssa.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '44ssa.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944b8aa8-393d-5155-ae72-103c92c0b10b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 44suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '44suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06164ef1-5bd2-5aa9-8293-cc7f268f58fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 44umutgmailson.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '44umutgmailson.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7d2c855-c8e4-544a-af90-a7952e70899f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 452616-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '452616-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dd82db9-8150-50a2-adda-9532fd5a1423","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 452995t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '452995t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4769dc79-915f-524b-948c-b9d7ef9e9388","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 45389-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '45389-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd560368-f3d5-5c35-a338-815294e5e458","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 456248-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '456248-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c19fe211-465a-500c-b9bc-b346276d93dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 45678login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '45678login.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a335993b-69a7-5d3e-af0e-cb2b7c6af604","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 456betloginj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '456betloginj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57a52e42-6548-5452-b6cc-c16a1dbb6fe0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 456viplogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '456viplogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a55d3c9-92d3-57eb-a8bc-dcacb19954d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 459121-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '459121-trezor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c091426e-4319-5384-9d26-861c534d530f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 45industripeindonesia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '45industripeindonesia.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d290c3f3-8dc0-58fd-9a77-6a470e6a9ab7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 45suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '45suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25b1f328-673b-510a-9bb3-a8d8c0f1185e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 46179-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '46179-trezor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bbffd45-37ce-599a-bcaa-9dd02e2b87f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 461957-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '461957-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e425a30f-b6a8-5f96-acbc-60ee684986c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 46238a-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '46238a-apple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92ecd17f-4611-5128-baa6-ebdbb20d56dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 46238a-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '46238a-google.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64f842de-7c88-54b9-a9dc-c38ec94b7a71","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 46261-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '46261-trezor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd6b31e5-32a1-51e3-8e41-7f9f4014127b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 463597-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '463597-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df202fe9-7930-5172-a2b9-ec94de11e972","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 46926-exodus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '46926-exodus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--713eef7b-d16c-59ff-b811-e077a823142a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 46biribizikendimizegetirsin.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '46biribizikendimizegetirsin.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83c8d2a9-9d66-5a1b-83b7-f554e62d0f6a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 46suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '46suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1fc9932-62ec-5c04-ab4f-2b28719cb1df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 471883coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '471883coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6d2557b-f43a-5724-bb22-ae7380c7153c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 472rinabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '472rinabet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9339c03a-2e7a-511d-85a5-60a8a41e1df2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 473rinabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '473rinabet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf4cf9c4-97b1-586d-bddf-08695e71d42d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 474rinabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '474rinabet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73e376ab-5db1-564e-8ab6-b7881de90005","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4778-claim.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4778-claim.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4d9cda3-e468-5b51-982b-91552b285021","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 478059coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '478059coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0853df01-bd0f-5b0c-8c1a-cc3708606018","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 478261-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '478261-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01356b42-949c-5855-8e2e-c4c47aa5a1a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 47ooo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '47ooo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ece7ee1-aafb-56cd-832e-ba50c220ae72","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 47ssa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '47ssa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49360b9-70bf-5619-a29d-d1eccbc35136","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 47suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '47suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b889c3d9-60d2-51f1-991c-274dba292550","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 47une-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '47une-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fdd8ac8-8cd5-58ad-8b93-e0202f6b7f3f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 47yilmazbonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '47yilmazbonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b35d4b7b-bf3e-5b59-8be8-a5abb647adfe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 47yilmazbonanza1.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '47yilmazbonanza1.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67d08944-f7b4-55d2-981a-c8bd60dc4fb7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 482194-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '482194-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36d5802b-c140-5164-a9de-532f6f0932df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 482728-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '482728-trezor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b46e9f9d-2712-590b-857d-3fa0cf8df47a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4829034binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4829034binance.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca76d32a-ebbc-517e-aa39-a6be2262cfc0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 485d64af8571.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '485d64af8571.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c6f4eb-6a3a-5f07-b8c2-4e26112fc053","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 48627-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '48627-gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac0a8fd9-cec5-5e43-8a8b-74de90a6c626","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 486bb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '486bb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa6f4370-c2ef-5180-8676-459b6eeeb7a1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4875ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4875ledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e28342f7-ba5a-519d-9817-c509629aa801","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 487612-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '487612-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d39af7ca-96b3-5025-acb8-a82ec556c4f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 48765ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '48765ledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--376c64e2-e9f2-52a7-8579-f27c005284bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 488491-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '488491-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7a9c8ab-3425-5510-80ae-7afb3c5fd1f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 488betloginj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '488betloginj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--466d6d0b-cfad-5a59-910d-8b51a67fbe6e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 488pdj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '488pdj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--091513e7-048a-5a3b-9b65-2fec84533e84","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 48mpt.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '48mpt.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1c42078-0dff-5346-85f1-16c866164541","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 48suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '48suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fbe0327-2f34-5c56-a5ae-66bfacbfbade","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 48updates.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '48updates.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbec4e6b-5b0e-55a9-968d-e45df216543e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 490245-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '490245-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4164662-9e94-5b9f-bc16-9ec505861354","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 491605coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '491605coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f15aef6d-cf0d-54b2-a66b-d09ca8ffccda","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 492013-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '492013-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32e5f68b-c2d4-59bc-8873-a28ff7653f38","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 492145-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '492145-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d5e4582-5426-5b48-9a70-50b32440ed7d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 492557-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '492557-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--530b31fa-b1ab-505d-98ca-409e5bb434a7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 493200coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '493200coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00c70c12-8ace-5a6c-9085-0740e792068a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 498526-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '498526-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5614559-f74b-5a60-a4e0-c5fe6a926c7a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 49erssalutetoservice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '49erssalutetoservice.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08c0f7d9-0331-5924-b73b-30a5f8d69712","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 49suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '49suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aaf2194-9155-5114-a4fa-bff8aa80620a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4amsui.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4amsui.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--889878ba-f07f-5435-b85c-7ec07bcb7e2a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4arbctp7.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4arbctp7.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adb8ddb9-b467-5703-8b75-5e5e14b9f7f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4b5q2z.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4b5q2z.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8759498-d919-5512-ae9f-7b7f105d0bbc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4chanstoken.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4chanstoken.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--889663fd-cd8f-5ea9-bda6-ad5279c88275","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4dlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4dlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4680672-99c4-5a2c-ad5c-a2da5a8c8d80","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4dmattress.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4dmattress.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d18f7f2c-7281-5bd9-afd5-444980e35643","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4dogtoken.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4dogtoken.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53c39456-daf0-5729-be45-c11149afae4d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4f2sm1y1ss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4f2sm1y1ss.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17906586-6dc9-5632-aaca-edc612ef05a7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4fuelmint.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4fuelmint.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c74226-2212-5c2c-91fb-0de2d2bdf8cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4fuelminthub.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4fuelminthub.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f850e230-b61c-59e4-be30-1302e36ceef0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4fuelmintlife.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4fuelmintlife.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec23cff1-55e6-5299-82c4-184042d272c6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4fuelmintm.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4fuelmintm.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8cf5578-e780-592a-b07d-94ee081b4a8f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4fuelminttime.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4fuelminttime.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d6416fa-afb0-56a8-b762-b7aa96053776","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4fuelmintzone.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4fuelmintzone.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2885024f-fd0e-56ab-b71f-9dd2229b1e97","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4ioej43.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4ioej43.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca4c3ea2-4ca6-57ad-8008-8fbf452736f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4irs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4irs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8829148e-c8be-5f17-a23d-11627cd9127e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4k-hd.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4k-hd.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dd43ea3-8b3f-5ac9-9226-c24aef4a58d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4k5r2d.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4k5r2d.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4d2c4f-8e9e-5fbb-820f-a96a456c9213","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4kbofang.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4kbofang.wiki']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c772678-4c87-5a29-8337-42084ca0f2e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4kdhlp.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4kdhlp.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d90f38df-eb12-55ea-862f-1d45db3e7bcc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4kfarma.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4kfarma.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--986ebca0-6734-5600-a009-d78294645496","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4klatts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4klatts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e94c08f-fc96-5ebd-825c-3baa0c795c9b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4l44vg22.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4l44vg22.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79b4db86-3160-52c0-85a9-5e88766ae3bb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4lifetransfer-factor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4lifetransfer-factor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1de8b99-29b3-5ada-915c-2403c4efc185","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4m2z8k.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4m2z8k.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b5d32ad-fb49-5acc-89c4-7cfd6b0cccd4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4m7x9b.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4m7x9b.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d632009c-e152-567c-ab97-b3c59070facc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4m8r2x.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4m8r2x.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cba67c8-2e03-5ce5-9781-787660e1c481","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4mattit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4mattit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7acdbae-d886-55f1-abb2-cc799eb0f7c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4n7v9w.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4n7v9w.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fae3c6d-b827-57e8-a531-a2ac34593c4c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4ndroidsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4ndroidsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04f4268c-ed6a-5dce-b185-27724a131fb8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4nhqatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4nhqatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e19c4cb-c452-5ced-a6c4-4a6043180d31","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4p7nt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4p7nt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0713cbe8-d104-58fe-a3d7-695f04d819e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4peakstrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4peakstrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea7b7f22-7ddb-5f6d-a89e-0087272e315e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4peakstrust.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4peakstrust.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e9b6377-ddb5-595d-b519-396218d0cab3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4peakstrust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4peakstrust.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63cc9643-dfc0-5d03-887d-576afdf6de2b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4r5d2k.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4r5d2k.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--356a2fe3-e2be-50aa-b3c6-7af998cdc1e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4r9d2c.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4r9d2c.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b42a9e-6461-5ebc-9b37-cc000f4c825a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4rrlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4rrlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93a98273-14e1-5385-b71c-282462e0b01b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4scatterna.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4scatterna.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84811a8b-c26f-5456-a79b-469da91618eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4scatterna.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4scatterna.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60bbdaaa-bd1a-5abc-bc96-20919844342c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4scatterna4.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4scatterna4.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64dd576b-f571-5305-8f37-e48f637084e6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4seasonsoutdoorcare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4seasonsoutdoorcare.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5da61e3-81d9-549a-9d08-910c7915454e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4sisterssalon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4sisterssalon.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76ecbb05-30f9-57e0-8f11-8ef2f6b736f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4snabb.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4snabb.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb0573d9-4298-5ba3-ba12-f9b597e0fa57","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4sssaa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4sssaa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e42d726e-66b4-57c7-ae90-8447762e4e19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4star-electronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4star-electronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24f3894c-055e-5f0f-b2c3-92332fa2d899","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4starelectronicss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4starelectronicss.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efdc66a0-ebaa-5877-acac-71b884fab546","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4suite.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4suite.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8304140b-80d3-59ae-a87b-04abd5e60bf4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4thbase.agency","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4thbase.agency']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09d566cf-80e4-5064-9882-7763ee1d46f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4thcitizen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4thcitizen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--babbbefe-9834-51ca-b0af-ba149382ee98","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4tunetoken.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4tunetoken.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf66465a-a022-54ce-a4e5-8b145b818c14","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4twbetlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4twbetlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19329ef7-80f0-5102-8379-4943e6bd06f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4uforex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4uforex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a0e64c4-592c-51ec-9210-510cb8a22553","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4upsgu.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4upsgu.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66dae913-3402-5d23-8564-e65cc1bda836","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4urhappiness.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4urhappiness.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdf6a473-861b-5975-8c5b-c8cc402d25b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4ve1upsu.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4ve1upsu.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bb1f724-0cad-5e8e-a7a2-7a1e3ae9e7a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4ve4.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4ve4.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54ef90ea-af63-5fc9-a65b-d1ea650b5ba8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4x4edmlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4x4edmlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54faa4ba-2128-54ab-a27b-3660808c5cc8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4x4shiba.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4x4shiba.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f63c7a90-15a8-5241-a02d-e14a5d9f4c86","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4x7m9b.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4x7m9b.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26ed2c91-8391-56fa-8e52-cfe3e7c4dea1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4xatt1.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4xatt1.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a73e65b5-80bb-5fe2-bc5a-565ed6edf8f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4yatt1.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4yatt1.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a04d79-b42b-5730-9332-530cf2846e89","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4ynab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4ynab.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5b0824a-6ea1-5fa4-abb3-d24c1730db66","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4z2k8m.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4z2k8m.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b0b99fe-3ebc-5157-8b19-0e2d4a022aa3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 4z5b2q.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4z5b2q.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1679dcc-558f-5a67-ad19-62b337293455","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 500rinabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '500rinabet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c09816a-3cf1-5ff7-8fcc-217a8c09f044","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 501inabox.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '501inabox.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b608c54d-dedc-508d-a7a9-bc84dede3550","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 501rinabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '501rinabet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edf12004-b308-59f0-a93b-82f1a3003b5f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 502rinabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '502rinabet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a5e8c0-2ac7-5071-9809-9441e5e24adf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 503rinabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '503rinabet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d2c7b70-1c5e-5d3d-8553-971c1900bd6c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 504513coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '504513coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08aa1a4a-1b82-5bf2-b235-37b6d64799c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 504rinabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '504rinabet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--735e9a7a-1b95-521e-bfb7-54750ee2d5cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 505betloginj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '505betloginj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e4b0c1-5d64-50b4-833b-73644f4bd820","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 50652coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50652coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff05bafa-73d7-5ae3-8ef8-cdffcaba8ea4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 508attorneys.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '508attorneys.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f95fc075-a93f-5c6d-a823-d52e7458aea3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 508trustedtester.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '508trustedtester.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--548f0e4f-5cdb-5dd3-b089-f1c5326be913","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 50betloginj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50betloginj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401e1a58-b035-5092-aeae-7d4eb69ff664","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 50dhl7.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50dhl7.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6565ceb5-ffef-57aa-a709-ddc4ac3760e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 50statestrong.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50statestrong.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61285467-5a87-542e-bcfa-697fe7f3f122","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 50statestrong.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50statestrong.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a52be84-49b2-5c22-806c-35e5b97a9774","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 50statestrong.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50statestrong.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddbcf232-f0c1-58df-b25a-97cef178695c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 51-dhl.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51-dhl.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--428f3525-4775-5ce7-8259-4e68b5b2d25f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 510552-ticket-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '510552-ticket-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d0484a3-688b-55ed-aee1-8d4d5f3cc10e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 510552coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '510552coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f914dc20-d439-5be3-aea7-fb3c907386e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 510threadbattery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '510threadbattery.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8fcd8c0-b78c-55b0-9254-5fc1ab992532","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 511230coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '511230coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bff6fc49-cac2-5989-bf52-733ee5e3dd6a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 512148coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '512148coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b694ee9-be76-54d1-8467-b637e9d0b189","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 512348coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '512348coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5b59afd-bec3-5cfa-aee8-43bf1c91b3d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 512479coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '512479coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5c37b89-ee1f-5a9d-9b5e-dfcce9866d85","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 513813t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '513813t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--165c17d2-5cbd-5c8b-b6d1-f12440a9b55d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 51717web3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51717web3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c38c82bb-052a-5363-ad61-906e5d690e27","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 517web3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '517web3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee456850-6eeb-5fdc-971f-2dc5a67dc044","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 517xx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '517xx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8765667-d72b-573d-af68-a1b96ca4cd4c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 518web3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '518web3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a77fcfc3-8c4f-5af3-a679-92477c497bb0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 51932-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51932-kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--544baa06-79f7-5798-8d1f-2f8103ee42c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 519858-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '519858-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--519ab141-9253-5411-a46e-ce5497b516c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 51ally.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51ally.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d422a0cf-a3e0-59e4-85b8-029d238aad27","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 51chigua-ziyuanzhan.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51chigua-ziyuanzhan.wiki']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6075838c-01fe-5bd2-9a0c-c5ac14a6b096","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 51chiguatt.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51chiguatt.wiki']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba32c601-e3f4-57d7-9165-80876513683e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 51dhl.asia","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51dhl.asia']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09fe6c12-ff51-5cdd-a088-07d11b3156eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 51dhl.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51dhl.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--199cef26-da5f-51cc-98d9-9b9574424a7e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 51dhl.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51dhl.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c6ff6dc-66a9-5bbb-849e-5048d7eed7aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 51heliaodhl.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51heliaodhl.wiki']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37da63fe-5f55-5329-a8c1-ed101bacc8d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 51hlwddhlw.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51hlwddhlw.one']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54bc9e61-4493-5be9-8e4b-e3b287716941","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 51hlwdhl.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51hlwdhl.wiki']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b83a0b8c-b4ef-56a9-8510-4ce6e7d1d337","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 51jinri-cg.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51jinri-cg.wiki']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9d231ce-c7d4-5182-84e3-d231813aed26","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 51micloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51micloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00e90fac-8690-59db-9f92-50921ba3f69b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 520039coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '520039coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60a8e463-3a73-50df-addb-ad433a4e6f33","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 521354-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '521354-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4341d147-11d8-5a38-bd6b-78f3651512b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 521735crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '521735crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1c09251-7f1c-5a49-86ae-027ce6085975","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5218905coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5218905coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57444173-ad31-5e47-9c29-948c18757734","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 52433coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52433coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee3171a7-6639-5c4f-86cd-0d5740f339bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 525ch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '525ch.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f783602-23f2-5ac0-946d-79c6524f8dd1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 526729coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '526729coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f461e00-3e1a-5ad0-b360-a2bbaf51c252","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5280959coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5280959coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e32c299b-2256-558a-9ac0-3b29e00eadf1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5280trustandwill.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5280trustandwill.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--accc46fd-5201-5cb4-85c9-c519e8701387","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5280trustsandwills.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5280trustsandwills.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92ab680d-b71d-5735-a453-27462444e0f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5280willandtrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5280willandtrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1ca6fe8-d0c8-55e9-bc63-0ed00c5d23c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5280willsandtrusts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5280willsandtrusts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc9dfbe1-2dc4-5d86-bea5-e3d56290bf1c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 529035-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '529035-icloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a87fc18f-c0c3-5975-a2b4-4bd770e4c323","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 529051-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '529051-icloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38e3470f-d9b7-5d4e-93ba-fcd338c2773d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5292809-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5292809-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69d8e8de-527f-502b-8832-23220732583f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 529322c-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '529322c-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97438718-6853-5260-af33-df9f7d536f0a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 529325c-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '529325c-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4f79813-8095-51ca-aeb6-9be36236e68d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 529852coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '529852coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63f72012-3306-5ec0-a9a4-9aad41414a06","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 529894coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '529894coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faa7d218-6d00-53c3-bc83-db007f94bdb9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 52crs136.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52crs136.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae63d44c-07b6-5939-9976-38bebd5cf257","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 52crs168.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52crs168.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b056895-cda3-5d6e-a1fe-e7f49795f6d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 52crs173.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52crs173.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21d43835-bba7-5c4d-92ae-61ecfffa2ef4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 52lianzi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52lianzi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--963ee9c6-3be3-5782-9209-37f0b96fe5f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 52netflix.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52netflix.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf2a1d2-4857-5ca0-b6aa-5ddd9e5d6a72","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 52niuyan.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52niuyan.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4b98fa7-2818-5355-932e-7a4ceb9ed409","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 52niuyan.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52niuyan.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1b9279d-fe48-5605-917a-7aa21c474cbb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 52niuyanxs.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52niuyanxs.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d3b586b-a690-52c4-8025-09bafaf25439","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 52token.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52token.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db982333-b78e-596c-9c9c-cba289e4eb48","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 52zanzhu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52zanzhu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5888fc22-f5db-51ec-91aa-d201b9664432","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 53-secure-safe-ref00.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '53-secure-safe-ref00.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b219047-a1b9-5f92-a917-53a6338170b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 53-secure0info.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '53-secure0info.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6acbad5f-3580-57b7-8c28-7cd634ac1b5d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 53-verify-id0-secure.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '53-verify-id0-secure.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efa8f9bc-8074-5d52-ac39-e2385345e3c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 531438coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '531438coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f10e230-7f63-571e-8026-15caf32629f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 533528coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '533528coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78416d25-0014-537f-b612-09b2d3756c1e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 538209crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '538209crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cd03a28-03b1-529e-ba70-db99ac92c9ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 538790coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '538790coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34eefaa7-2027-5555-9d5a-bd9b4c029d13","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 538904-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '538904-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd3de5a7-bc0f-53d9-9a8e-938d49e3841f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 53suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '53suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b00cb9c-76bb-52da-b980-f8bf6fd05a82","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 53supporthelp.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '53supporthelp.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6540b21-3fea-5149-bbe5-9d9983de754a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 53verify-secure0.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '53verify-secure0.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4da72a77-bc55-5138-89c6-a546b99aec6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5427952coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5427952coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40200f4e-bfb9-55b4-abe3-05314ec6fc5e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 542890-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '542890-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2e18c41-e076-59e7-b876-e5e14dd62267","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 542895-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '542895-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bad63cd-d120-5f62-a55b-37be60782a0e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 542975coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '542975coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1839d8c4-a332-56e3-a2fb-0f114747c4e6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 54313-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '54313-ledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--512aedeb-bf72-5f6f-be85-fedd1191a507","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 543199-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '543199-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed2f2545-cd66-5f2e-a6ec-b3871f79d0ff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 543662-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '543662-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f903d1b8-f693-5982-8a45-90729b9ceee6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5441071-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5441071-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abf2fb4d-dc64-53af-b5bf-4588928e4b67","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 54444bilin-microsoft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '54444bilin-microsoft.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6908c554-f257-5aa0-832e-0ab0529bafa9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 546232-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '546232-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6afa401-2cbf-5eaa-aa03-a228426b1fce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 548382coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '548382coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d4ba5f5-1f0c-5d35-9cca-07f3980ac9d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 548728-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '548728-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72967a10-4a8d-5212-bf56-a7a26888c3a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 54suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '54suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c168485-9b4e-537c-b76d-00f579c3c823","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 550378coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '550378coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35ddb070-e9a2-58f2-b2a4-5d8e2aad43fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 555ssa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '555ssa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6981c731-f842-5c9f-8309-5a8a1dcfbbe6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 555web3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '555web3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--985e1e20-62e2-5c17-97cf-8e3089de4c7c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 556855bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '556855bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cc198af-1969-51a1-a386-084372ca3a5b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 556sui.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '556sui.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12e1cc54-ec9a-549d-8c7b-40ce7fa08f4a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 559052coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '559052coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6391dbd1-4c81-5bb3-9f06-75df8eb6f96e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 55aaatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '55aaatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86e894bd-887a-531d-96c8-59cbc9cddd92","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 55aattt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '55aattt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3987bdb4-49df-5df9-80a2-ec80122e8b1d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 55dhl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '55dhl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62d4bccc-cacd-5c0d-9706-122e861f903b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 55messagingnindonesia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '55messagingnindonesia.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b11b3d49-9e09-50a6-bd20-5823f7ff2fd4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 55nnab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '55nnab.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bdfb0f7-5fed-5476-a81c-3c7fc31a3fde","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 55sqz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '55sqz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c626e31c-21f3-53e1-9b79-a02c2978b320","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 55xx7.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '55xx7.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e296c7b0-6a91-58d4-8638-6414f27a6279","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 563472coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '563472coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba7cc87e-3fbb-5a7f-892c-1f279b1f14a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 56712-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '56712-trezor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5de67c7d-7cb4-53ef-b60f-e67fd892faab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 567sui.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '567sui.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6f69c18-c930-554d-8248-b63adaf81ee9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 56suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '56suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec23d37e-b672-5f9c-8d8b-65e05bc22e43","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 56winab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '56winab.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb9b852b-6eca-5fcc-a0d8-1a8ce0ce4978","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 570base.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '570base.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad6878a4-8a73-5f14-abfb-5c4f3cbb0929","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 57340923coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '57340923coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4f00d6f-d4d9-5537-912d-c638fd66d525","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 577682.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '577682.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e48a5aa2-ee11-5001-8e77-a831a1080353","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 579832coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '579832coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--719fdd99-fecd-55f2-a364-26701a5436b7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 57suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '57suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16ef082e-deb8-5b74-93b9-e6fb54326c6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 580235-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '580235-binance.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7324fe94-87cc-5142-b410-9ed366605df8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 58036coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '58036coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f076d76d-7b35-53e4-949e-6684fb62445d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 580395t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '580395t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5be6cc4e-6c00-5bac-9656-775dd3418f5a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 581654-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '581654-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25091dfe-9bba-5c53-80a3-ae759da04cd3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5820965coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5820965coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be96e83e-c86b-5dbf-8d8f-b75c097eb324","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 582302-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '582302-kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38466e1a-14a6-51cc-9703-4b8c95318097","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 582304-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '582304-gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--521d6f2d-ea93-550e-8f14-60aea994d86e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 582309-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '582309-kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--709082b0-65b9-5f20-868d-678ac3c22365","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 582309t-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '582309t-binance.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69ffb4b1-ab89-5722-86cd-0feee6577357","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 583157coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '583157coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b01d0316-d646-5e26-9e26-b9d6843346ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 583322coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '583322coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2806a86d-3297-5404-8959-a62f22419a2a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 583721-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '583721-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2113123c-ec38-59e3-8832-4d5b2a260849","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 585193t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '585193t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1d7f682-70c1-548a-9c81-8a4123da53b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 588794coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '588794coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd2b3a18-4d9a-5b3c-9e1d-76d959831661","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 58915-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '58915-trezor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14e7611b-99c6-5f48-9f69-772d14ff1cf9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 58jianzhuwang.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '58jianzhuwang.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c83de224-59a9-500b-be8f-d5938abbfa41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 58suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '58suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b23909-80f4-5582-a35b-27d0cd9fee7f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 58tiktok.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '58tiktok.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2728e352-4b83-581c-95c3-2dd534e2327b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 590144coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '590144coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f69fe3cd-828d-561c-817e-34db2c63f73c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 590578zugbr8.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '590578zugbr8.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aff38c12-b428-5d4e-86db-4b7fba0f3f9f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 591832-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '591832-trezor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1947967-dcd0-5920-8e83-8077efc8748c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 592105-exodus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '592105-exodus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8cfcbda-c37a-513a-8e18-f928f0c044d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 593046-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '593046-icloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d18420b-25b0-561d-89c5-6681c11a216d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 59suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '59suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e891156-9ab6-5583-b57d-3c10165164b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5advertise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5advertise.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53781eef-9b7f-532c-ae56-d81af2a740c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5attqd.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5attqd.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c12a78d-ee28-565e-929e-dbd8ea228bd1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5b0qyh1qd.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5b0qyh1qd.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1f1a263-410b-5112-8c67-b8da0b5b296e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5b7v3n.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5b7v3n.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc0a93fa-6897-5ab5-922d-8f6d20af7276","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5bmo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5bmo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0732f2a8-7498-5df9-a8fa-397d7802b16b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5c3p8d.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5c3p8d.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8189236c-fc45-5d16-a219-4e9a1d6eb6d3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5dweb3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5dweb3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d691023f-a790-52ac-9c43-5f3d0306713d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5firstsaturdays.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5firstsaturdays.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf8c341-7283-57c5-a510-e022857160ac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5g-rogers2redirection-service-en.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5g-rogers2redirection-service-en.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db19a160-23ab-5395-ad82-e1298a71480e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5gfirstclass.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5gfirstclass.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e33d6c2-741b-5048-bb7c-9085bc1386db","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5h3oyhv838.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5h3oyhv838.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c764ae9-078a-5d86-8443-5578f9a4c016","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5ijianzhan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5ijianzhan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da839cb0-7bf4-51d1-a300-27d288313503","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5k6w7v.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5k6w7v.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60152ba3-05ee-51b4-9bff-7885886ee80b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5k9i5e.skin","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5k9i5e.skin']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77c953af-5f4a-55b3-bb33-1ada18845146","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5n6w7v.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5n6w7v.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a67ba2de-f4a9-53f5-87a5-436aaa566743","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5n8m.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5n8m.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aea73255-9cf8-57a1-9c69-ed065fe63afc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5nab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5nab.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e60159cf-11e9-51ef-b127-3edbc1e19ef4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5nabr9j5j.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5nabr9j5j.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf4478a8-b258-51be-b8b6-b85eb3dbb7e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5opairdrop.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5opairdrop.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f578844-4f0b-5caa-bae8-be4ad5cec9a6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5p3d8c.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5p3d8c.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10d1b0cf-b556-562d-b228-8752560818d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5p5oj4k.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5p5oj4k.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2d1df2c-f69c-51bf-ac07-deca77148bd1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5pan15hf00d159r3at.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5pan15hf00d159r3at.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32ad2eec-e053-508f-8153-15bdaabf06b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5pointcu-verify.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5pointcu-verify.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccfd432f-1ed5-5219-bbfa-99646da18ae0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5pointcu2verify.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5pointcu2verify.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5c43a4d-542c-58d0-8340-3ab83bce6eba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5qrdkb.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5qrdkb.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff6db9d3-5358-561f-b309-205b0d520c6e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5s4t6b.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5s4t6b.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6f33e90-346e-575a-be61-589033977815","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5scatterna.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5scatterna.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07f496b1-38b0-5eb1-b5ff-d338e921645c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5scatterna.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5scatterna.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20784751-e723-5fe1-97dc-c5bc78eeeb20","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5scatterna5.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5scatterna5.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f372a046-5c6e-50ed-af07-ff55834c48c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5sssaa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5sssaa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--190cbd9f-03ee-5ec3-8e58-9dee2d139643","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5starcelebritiesconnecthub.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5starcelebritiesconnecthub.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3727e11d-4245-50d1-9883-d7a62ed8956a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5t6v9d.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5t6v9d.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee37fe7-13fd-5d9a-a831-c211fe8df8af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5tr4n93r1nth3n19h7.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5tr4n93r1nth3n19h7.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c976a27f-f8aa-54e8-a9d5-412777c7a546","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5umm3r15n0w.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5umm3r15n0w.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--208bb952-615f-57ec-bb0e-c54c7704924a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5un15up0nth35ky.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5un15up0nth35ky.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9b843f2-5949-502f-89cc-2441e732991b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5und4yfund4y.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5und4yfund4y.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e91a4f52-fe5f-5d68-aba2-7ca1c905b00f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5update.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5update.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f6c01e5-6dc3-5f02-949d-2f1f49dbaa1c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5v3n6b.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5v3n6b.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--598d1e77-9bb9-5628-9445-35726c01e2b8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5v6d9t.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5v6d9t.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b256e102-9674-5823-b52d-60435c0a97be","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5v7n3b.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5v7n3b.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3556518-0b2e-52cb-a8d6-9c59ceca466a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5w3mk.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5w3mk.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62319ffd-1f54-554c-9949-1531fda23f42","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5w4e6.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5w4e6.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97cce8b7-2dbf-517c-b3de-2a3b09aed68c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5wattglow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5wattglow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bf22696-463d-5b92-9b16-dc152fe9ac4b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5web3.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5web3.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06c73b65-a607-5435-bd24-68dad60cb345","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5wv8qpr.skin","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5wv8qpr.skin']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--795da83f-15b4-5578-9b65-4e1fb3c6a713","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5wy36w.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5wy36w.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--575baf0d-1391-525f-b408-fe6cf8d1f042","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5x147ssaa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5x147ssaa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa19ff8a-c7db-5d07-8eec-78c77b0408b4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5xfollowupsystem.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5xfollowupsystem.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25194fe3-b4d3-59b9-aaea-95012ecef9a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 5ye7uy.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5ye7uy.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--330982b1-f035-5d26-bb35-b7ca5bec4543","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 601019.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '601019.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18d78604-1413-5646-81e4-ebdd3eaaed36","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 601219.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '601219.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91035d63-3970-504c-b769-6cdc6e1e3cd4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 60livesconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '60livesconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c499f473-9be9-5eee-8417-5efac88463fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 60maoat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '60maoat.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e67b8c1e-f189-596b-8349-192e21c6d5ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 61231-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61231-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9be945b-5d52-562c-af5d-eed1297d1e9d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 617982-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '617982-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b37d269-5ac5-50ad-b109-442fa157caf6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 617attorneys.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '617attorneys.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c39d523b-0047-5845-acc1-0da288ea1abe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 61suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bea2fd60-0483-5118-ba16-952b49613555","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 620groups.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '620groups.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec0ff78a-a81f-509c-918b-c5638a8c4ecd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 622wkb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '622wkb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f8258a0-fd68-57ad-aa26-cc21278ca57b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 622wkb7.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '622wkb7.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faf8f195-6fa9-5a4f-9706-3051ab82f0a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6234coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6234coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e8a9add-ea47-5537-b374-77a072fa8628","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 62orcaoo.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '62orcaoo.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f7c742-c0e6-541e-8af8-6ce7ad7ebf41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 62suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '62suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfd9a44d-82c9-51e0-8f90-c9b8cb88c585","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 63eyup63bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '63eyup63bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aecdba3a-4135-50c9-acc4-0225f14bee75","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 63gd2s.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '63gd2s.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e62ba59-f6e6-5fe2-9b75-5df10fd94060","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 63suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '63suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2ee9cc1-4e11-519c-ac2d-33a6d18aa89e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 64517coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '64517coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c83794-f433-5147-9a23-da377a624b1d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 646388coin-base-review.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '646388coin-base-review.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab930090-aa29-50c0-93ec-15631cebb75d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 64suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '64suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28de099c-7dd9-5a13-ae6d-d0c28e905a03","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 650dhl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '650dhl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7401e5b6-9c92-5950-86d2-806237a460f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 650dhll.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '650dhll.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0737732-d322-5bf1-ba4b-c25af3f3c155","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 651hairstudioiza.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '651hairstudioiza.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec82e629-bea7-5911-a489-6a222b32214a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 651izahairstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '651izahairstudio.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64534412-0702-50d2-bdae-7a33acc94973","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 653888-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '653888-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf31e924-da4b-5e6f-8521-38ba3133380d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 65433t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65433t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10867320-c1c2-5104-9f0b-b8f46d80f4ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 65seyho65bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65seyho65bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b957b95f-0c6c-574f-91d9-ed0bae37875e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 65seyho65bonanza1.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65seyho65bonanza1.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b13dd836-8a93-5d99-9c8b-f75db580a33f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 65suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--329c8f70-722f-5179-a204-987f788ee90d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 661291.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '661291.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97228b79-78f4-591d-b33c-c4a7816a13b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 666jianzhu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '666jianzhu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef04e8d-bfac-589e-b884-8f176fcea9c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 666rainbow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '666rainbow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--184683ab-d297-5a66-8838-3c2196fed5c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 666ssa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '666ssa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cd1837f-c476-5b6f-9ef7-a88524623756","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 666tokens.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '666tokens.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79401518-2dca-5459-9990-bd3042cddbe6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 666web3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '666web3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d03897e7-dbfc-5c80-8d75-607f60fffc10","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 66731coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66731coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97e8b329-1466-5868-996a-1ea71d21b9c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 667sui.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '667sui.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01f4751f-cce1-5201-aa32-c14210bb215b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 66aaatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66aaatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c2ab3c3-41ed-549b-bd99-bf1c34cef6b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 66aatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66aatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349b0133-d4e9-5c51-ac22-c310abab2bdb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 66aattt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66aattt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--505ce55a-0219-5f29-a55a-dbbee5e8c688","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 66clupslot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66clupslot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a1a6797-8aa5-51a0-a50b-77ccff7b159c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 66dkbl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66dkbl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a16fa0f-9be6-5432-baec-5da5a4d8a6c6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 66excrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66excrypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e413a9d-4dff-59fe-af90-fd35e8fbec05","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 66hot113.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66hot113.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7537f8bb-0293-5a46-a3f5-ebc3c53bd461","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 66irs5.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66irs5.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7db668b5-baf6-58d4-85f8-2339e8a0cf17","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 66jianzhu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66jianzhu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c20fa0b0-cc0f-58a5-b17a-f6d2be167a87","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 66nft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66nft.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a6bd2a8-3910-5f5b-b074-19e565d25f58","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 66rainbow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66rainbow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d1cd9e5-239b-52bf-bcad-32f4d5ea02bb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 66rbca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66rbca.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0580dac4-f70f-5235-915a-93b922a4053a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 671928-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '671928-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1931e90-2f41-5e9c-8af1-9e8086b4f102","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 672890coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '672890coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc972f16-382c-5d83-bfdd-ff8bfce59b24","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 675943-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '675943-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8736117a-d106-5100-bcf5-a586a5a28c46","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 678172coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '678172coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acd5928f-c2c0-52ba-94c5-89f97bf03c6f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 678sui.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '678sui.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0464bd87-120d-5d93-bf17-4e7a583b2020","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 67suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '67suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe5325e6-1557-52fb-992a-ba820d0cfc45","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6839463coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6839463coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77a159c1-9a13-5095-b5b8-36c176885a7a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 68rbc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68rbc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba21ce21-e57a-5bac-bc22-0fd3bd8531a9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 68suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--481ef169-984c-5473-b456-96ebdbe9d04e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 691648coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '691648coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91659dee-cbf5-50ef-8165-2d55d8657d04","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 696835-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '696835-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--916f9fef-c841-51da-9060-883da36e8ebb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 69jianzhi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '69jianzhi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--705523f9-2493-533e-aa83-b7aff0ba013d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 69suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '69suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c62ed002-9e5c-59a9-be4e-adcad82ee85b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6anzlq.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6anzlq.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d851fedf-8f82-5b1a-a97d-d80f89853924","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6bitcoin.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6bitcoin.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40b65e07-10a1-5795-954a-9291160107c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6bluri.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6bluri.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6612c902-edcc-5b36-8fce-389a9dab3250","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6bmo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6bmo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--269c4d80-d277-5b49-8384-e84874a858c4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6c2p9d.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6c2p9d.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8435b545-c545-57c2-9238-b1c2a2b7fdaa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6c2v9w.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6c2v9w.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b80d541e-d5b7-5a0e-b868-3006dff0ef56","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6ctbmo.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6ctbmo.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1e9c439-3b9c-5845-9a29-c7aed7455efc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6d3vr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6d3vr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9e14def-2afa-500d-b8c3-0de05a833d70","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6dkb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6dkb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6465c61-1b8a-5772-88b4-362d3f1dca45","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6e3u48e6.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6e3u48e6.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--284eb0c7-06d7-5eb2-8ae3-186240918a29","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6ey73y.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6ey73y.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d420f197-c450-536c-b437-2024e9dc7478","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6f2h8q.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6f2h8q.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e086abe4-007b-5064-8df1-f6175599283b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6ffnft.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6ffnft.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68fd836e-7010-5e8c-8a76-81430513405a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6figtoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6figtoken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d94eadc-32f2-5733-aaca-be6db138e665","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6gznft.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6gznft.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a8fa3d9-5231-5684-b3be-0bb0a4a9696b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6h2q8f.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h2q8f.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51921a2e-22f8-59ff-bb70-2c18a14a9be3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6hbmo3.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6hbmo3.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3df8fc9-d50a-52d3-a947-cda3b5dcb8d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6j2r9t.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6j2r9t.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2166f2d3-e777-5eac-87fd-dec5245331c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6j7hvg2.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6j7hvg2.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--514cf233-1e87-5ff5-9e6c-93a67a12f1d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6n3w4r.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6n3w4r.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f7954e8-54e4-575d-ac7d-74b421f97dd2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6nnft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6nnft.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dacdf996-adfc-5dff-9328-1d4640ff62c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6outlookdarien.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6outlookdarien.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85cf9196-36e8-58de-b7e7-282b98e658bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6p2d9c.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6p2d9c.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af545fd2-9124-5468-98ac-fa7a57431c45","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6p3dhl.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6p3dhl.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dccc190b-840a-576f-82cf-d159958f76b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6r2t9j.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6r2t9j.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e77444df-28c7-590e-97eb-588310678529","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6r3n4w.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6r3n4w.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f30fa837-c49e-5c9b-b90b-419503f4c0dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6r6rbca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6r6rbca.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d176eb7a-e1a3-5808-ba9c-457fbd117db3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6rrf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6rrf.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e420d174-0c52-5e91-a6d7-2028ada8f89d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6sanzo.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6sanzo.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f2d0fa0-45a9-547e-9802-5078102f1faa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6scatterna.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6scatterna.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebbd9fa5-59ad-5783-b8e8-0a9b703b1a39","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6scatterna.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6scatterna.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f404de2c-09b3-5a20-937d-6827575ea915","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6scatterna6.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6scatterna6.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86264731-2eef-5420-a99c-fa9bc26b3bf5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6sssaa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6sssaa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10eebd71-8cc7-510b-b845-6233b4a73be5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6sups0gc.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6sups0gc.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5046e431-0e52-5b61-964c-25b422214ce9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6tronzo.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6tronzo.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34f62c98-37d9-5abb-8ec7-799b08311e37","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6vanz6rfn0.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6vanz6rfn0.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--375e6409-a979-5dce-95bd-3fc884b5e660","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6y3h6e.skin","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6y3h6e.skin']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4326e8a-3f28-549c-aa1b-bb71c935ad2d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 6z9bhjupsa.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6z9bhjupsa.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04c0902b-86a2-5081-9510-e8e72772f385","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7-mile-bridge.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7-mile-bridge.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--051bf31e-fe4b-562a-9522-bf8319f30181","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7-storescooperation.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7-storescooperation.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eb517b0-a304-544f-bf91-b7f049341a21","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7-zip.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7-zip.win']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ab3be80-cb8e-5b97-a993-5a09e1761476","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 70-30cities.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '70-30cities.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38fcbf6e-376c-59d7-8a24-a0236207468c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 70-stripe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '70-stripe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66de0272-ff1d-56ff-8f58-8b5b7a006001","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7094525kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7094525kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6404b4e-66fa-53a8-bbc0-0b293d77b505","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 70953coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '70953coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3c2d077-1310-5ca9-adcd-0805930ae0cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 711-telegram.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '711-telegram.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3de682b-9903-5f83-9adb-7d617a649b20","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 711-telegram.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '711-telegram.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27efd569-2315-557a-ac74-eeb29ee1647c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 711telegram.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '711telegram.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62ca3143-b159-51a2-b258-ef7d38e13cb8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 712385-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '712385-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60997a3f-b7e2-5bc9-831f-fea9926b6df1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 712910-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '712910-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6783fadf-4d0d-5664-afb3-a43019c923b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 713itsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '713itsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--801dcc64-7a1a-53fe-85b3-7325c657391c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 71p8gnxrbc4eqfy251m.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '71p8gnxrbc4eqfy251m.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96192992-ddd6-5b26-a147-2797ed4a0c96","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 71suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '71suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab2d10b0-2d63-54b9-99e3-18e8aade3758","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 720899coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '720899coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27d7652e-b0e5-5f10-88c7-df26fcd9de9c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 724547coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '724547coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab6df7c-ee19-5fdf-979a-2708a0caa124","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7269att.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7269att.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bfc096f-5288-5527-80e7-25fa75e8a9ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 729281coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '729281coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c7cf3c-5f8c-5311-8130-69db8fa1d299","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 729291-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '729291-apple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--805fac65-e067-5434-a43a-72933a973ba8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 729367-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '729367-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88854eec-f5c0-534e-8061-ca558f9a8bd3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 729816coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '729816coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b02a943-e0bd-5a40-b4e1-8f215dd3bcdf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 72patt.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '72patt.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8140b88c-352b-5b55-a2a2-49869a069008","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 72suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '72suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55e4b682-0595-52ef-9bde-42869293e25f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 732952t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '732952t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2960ca36-341e-54b2-b279-4c9a07d29b6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 734912-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '734912-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e178ae88-be61-54f7-82f9-e4dfc803f31f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 736183-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '736183-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7cb5b21-da83-5d9c-afdb-be8973ba0920","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 73684-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '73684-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c51e2e62-2a74-5379-b627-6f899eecc636","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 736891coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '736891coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a09d5bbf-feb4-5a94-a3e4-d2e741d5ee65","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 737452coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '737452coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf1f3526-222e-55d5-9424-4b000b90c38d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 73916-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '73916-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b2d1e0c-a61a-5a6f-a46d-ddccb5a50ef8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 73suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '73suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b6d1c6d-a2c3-577f-bedf-2e4731152d4f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 741453coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '741453coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19c6e597-667e-505b-8f49-e94508a0d6ed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 741web3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '741web3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa5548df-a500-5a11-89e1-9ea2125e002b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 743677-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '743677-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeba5861-bf68-5854-ae04-fba607c30841","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 749165-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '749165-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcd00079-3715-5634-bc2a-5fdab319c41d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7492075coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7492075coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3805f608-394c-5d9a-862f-9a03d355a5aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 749855coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '749855coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22777901-f0a4-5e64-b07c-9c05296161b4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 74suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '74suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea2f8cc5-354a-5d31-b7da-a275bd607da7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 75006.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '75006.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e74a5822-b8e1-5f62-b5d3-30f42ad716d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 750258coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '750258coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97f98c76-5d1b-5f61-bc41-c46eb22cff51","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 75032marketupdate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '75032marketupdate.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42af4661-7c2b-52f8-a6bd-712e8695ef02","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 759200coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '759200coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1311742c-1bf0-5c35-b997-9f11608aa0dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 759803t-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '759803t-kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63cd5234-91fd-52b9-9f9c-a4f2b778908d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 75naliexpressd79r.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '75naliexpressd79r.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2824fbdd-17f1-5e57-8827-a602bc78c64d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 75thforcesupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '75thforcesupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bf6fb37-d526-5daa-8999-9722466be5da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 760343-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '760343-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--305ebc5d-015c-5c85-a98a-2a89b92aad0c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 761jj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '761jj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ea58e03-6e87-5181-ba37-f4bec77fd162","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 768support.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '768support.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd96d09d-12ba-5253-9eb7-7c70c367e403","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 76ups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '76ups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9cdcee-4f2e-560c-90b4-58a8595b6ab2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 77231-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77231-kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c065a5f-ac7b-595c-a342-df0beaeafa08","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 773lawsuit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '773lawsuit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c92d81f-5e18-54f4-b2e0-b2325ecd6026","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 773ll.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '773ll.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b339ad8-f052-5e46-b7e1-5e2de375d8b8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 775842coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '775842coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1592e795-cdbc-5e38-8c20-ba2b7e5d30c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 777cash-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777cash-app.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f0c224c-dc38-51f0-8a22-c4eed8706cde","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 777pattigame.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777pattigame.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702e13ec-a13c-5ed4-90dc-290b87e5093b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 777rainbow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777rainbow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--426d4e9c-56ca-5c34-8654-09579756c93c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 777tenpatti.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777tenpatti.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74b040c4-11ec-56bc-8ada-a905675f91f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 777ua.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777ua.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c73cc6a-7634-53c0-8031-28749383dcda","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 777vault-at.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777vault-at.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb616d79-a825-5e81-b00c-25c0afa5eb73","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 777vault-ca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777vault-ca.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9162e02-f3e9-5a43-a227-06411158379c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 777vault-fi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777vault-fi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc78611d-5502-559b-9058-e2fec6a2ee7a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 777vault.casino","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777vault.casino']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31f07403-0607-5db3-9e8c-6bf6260994b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 777web3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777web3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e04ca057-2b5c-5339-95f2-029b6f64541c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 777youtube.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777youtube.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d19756a8-51a5-5160-829c-4db7dce36a32","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 779777coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '779777coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d4e9f10-7035-5c7f-843f-f95495a3661f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 77aaatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77aaatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14f9ba79-0f9b-5fd3-987f-9f9ead8031bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 77aatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77aatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--923ae96e-430c-56d4-a8d6-dfd7c0fd0c83","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 77aattt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77aattt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e0973b0-af1b-5b7b-98df-a9e388ff6d52","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 77anz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77anz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15fc5615-2362-58aa-878c-ba65e4504949","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 77chatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77chatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b797aa42-9922-5bec-8f0d-e394a95f513d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 77crown.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77crown.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92267beb-018e-57e3-b302-93fb2c5c54bc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 77crown.mobi","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77crown.mobi']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a531ccd7-14a7-5463-b231-5d2d124ed531","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 77mh.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77mh.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12d4916a-f97a-54b4-9194-65fbd58a71c4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 77scatter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77scatter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe441785-4509-542c-b459-3b8fff54cb79","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 77scatter.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77scatter.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae16ce15-5d7d-5df8-bb5c-2ef3ac1ab79f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 77ssaa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77ssaa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91754092-5ea7-5034-8fea-e7d5b603404a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 77ssam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77ssam.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--359f6f59-cac2-557d-a085-b8f352a796ec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 77tiktok.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77tiktok.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2226af6c-ed46-5bf8-8930-e218c62eda4c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 780675-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '780675-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3bb68f8-b0f3-581f-bf00-51830b2e88eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 781371-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '781371-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87e12bf0-4daa-54fd-ac77-7637c66233ef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 784392-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '784392-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37029c8b-c604-57ef-bb52-c5fe7338bbd3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 784715-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '784715-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--476374fb-01c3-5a2f-8d35-560d9e45c2a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 786233-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '786233-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e02c3e9c-4fdc-5337-ba82-2ca123713ece","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 78652jiattpsl52772.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '78652jiattpsl52772.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef42a504-5a44-51f8-8ce7-7be4ff50a928","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 786588coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '786588coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f3e3811-9288-50f4-951b-d1a49ed23f2e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 786894robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '786894robinhood.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eac1986-f07d-5686-92c7-03c7e12554fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 787262-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '787262-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6217f5cc-4ece-5a8e-add6-524427cf385d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 789apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '789apple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8cd0ea8-a495-5ca2-b0f6-6e835359a4ec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 789jackpotapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '789jackpotapp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ff5922d-51ea-5e29-b8d6-18e1b485a3c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 78bossapp78.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '78bossapp78.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8738d98d-8d88-5dfd-b8c1-8f57b59bd15e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 78mv2kx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '78mv2kx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c77a3eb6-10d5-5930-83f1-9d0e2073dfd8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 78oups.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '78oups.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8acd46b3-4193-5b02-8e91-3bcd8a922be0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 79-stripe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '79-stripe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dc49b0e-baf1-51f9-aedd-2d70cfef2c60","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 793481-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '793481-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d6d6b8b-fcb3-5060-a20d-c274dc89b593","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7952375coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7952375coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0253a3-4c86-55cc-974f-575b620df248","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7967890coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7967890coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39a86f4b-c092-56db-8152-cecc90f048ba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7973-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7973-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e607fc6a-b321-563a-9bcf-b40a70833dc3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 799952-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '799952-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a238008-63a1-5f4c-8fa7-8c8f3dec76f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7a3irs.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7a3irs.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a98bdf9-057b-504d-8cf5-753ddbc0abc6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44b36b26-3337-56d0-954e-ccacce6fcfcf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7attoo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7attoo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee331f59-c927-5bcc-bb80-bb93f88eb60c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7attraction.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7attraction.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02f1a66d-fd19-566d-8686-0fc0a690f9de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7b4q5z.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7b4q5z.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a792c52a-6e2d-500b-86a3-407140b1aee8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7bar7farms.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7bar7farms.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2482b7e-40e9-5ba6-99bd-77fea02d4977","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7bar7farms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7bar7farms.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1c89c7f-c1bf-51c0-a80e-2906fba0375c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7bitbitcoincasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7bitbitcoincasino.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c26b341e-deef-541b-9efb-e1d0cf31424b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7bitcasinocrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7bitcasinocrypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3541ed59-5950-555f-88c3-36c7e23cb9d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7bitcoincasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7bitcoincasino.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e22f0fe-8b96-5f30-a781-ceed05621a09","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7boxtoken.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7boxtoken.network']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d95916d2-ee16-5743-a4c7-248204697b6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7catt9c9.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7catt9c9.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef56a8a-94dc-5d86-9767-3a9279518f8c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7cattlebl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7cattlebl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbed4d69-610b-521a-8fd4-83297dc47d25","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7cattleclub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7cattleclub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a24a4de-54c7-5b01-9d91-f1cee45d7177","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7cities.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7cities.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a37395d-9bb1-553f-9839-be33fa474229","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7citiessyndicate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7citiessyndicate.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fe1917b-9c8d-5cad-9d3f-40bc93712311","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7daystradingcrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7daystradingcrypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce282bd-5f04-5688-b0e0-a40e366b0cdd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7dh26aja.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7dh26aja.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43980643-9097-52ae-a7af-a8923c5ac8b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7evensuites.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7evensuites.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1826a4f-975b-50fa-8f22-22d2fc55d51a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7fbmok.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7fbmok.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b41f7dc4-18f6-5708-8b03-ffdd8d58919b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7gbitcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7gbitcoin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--711fefa7-aa04-5583-8859-2b1287c52f54","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7gcryptobank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7gcryptobank.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35de59cc-7511-5c61-84ea-eabb5ccc3c70","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7gcryptocoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7gcryptocoin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eba75bae-b590-5c68-a19b-1d3c00d006e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7gcryptocurrency.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7gcryptocurrency.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffdfdca3-fe92-5450-b129-0bf7ee35862f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7irslz.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7irslz.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0fb25ba-6a41-54f4-8dd8-e826c5c1d064","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7k-official-pepe.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7k-official-pepe.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55c96523-3531-5ca1-bbee-ca84e0956ff8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7k-pepe-casino.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7k-pepe-casino.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01ea963f-9b8d-5cd1-bd96-a83e70600753","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7k4m2w.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7k4m2w.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d036695c-ea95-5b1f-bedf-618aa9e42313","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7m2xb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7m2xb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5881322-0fbc-5f30-b6f9-cad5c9eb789b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7m3r4x.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7m3r4x.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--187e4fed-d32a-5b79-b0a6-23d85d1feb66","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7m4z9k.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7m4z9k.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a2cda8a-27ba-546a-b776-031861a6820f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7meterbca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7meterbca.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d0b9ec-6074-5d91-b22d-65845646efcd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7mmbetscatter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7mmbetscatter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94690b89-0653-5788-8295-60613c77630a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7n4x2k.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7n4x2k.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d32469f-d95c-55c2-8464-8cae5d4132b4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7oy5are43v3ry0n3.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7oy5are43v3ry0n3.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c42c5065-63a9-53f3-b7a1-65ffbe903903","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7p8j2q.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7p8j2q.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0acefc8-62ad-564b-9b78-33f64c08d534","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7q8p2j.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7q8p2j.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d717da3-8442-5c53-952c-64f84195dbcf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7qxtvups.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7qxtvups.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaeec2c5-70f6-5157-86fb-51268cc3015e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7r3x4m.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7r3x4m.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bceef33e-926b-5110-a263-6da888740a66","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7rainbow-collection.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7rainbow-collection.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4979484-b310-574d-b449-d09c821d21d0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7rbc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7rbc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53053bee-16f7-5c2c-8dd3-ddce92feebc2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7re8.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7re8.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97625bb7-96d1-5c95-80a4-349b643343f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7s5q.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7s5q.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ffb51a4-123c-5bbf-be64-54e31962bd2f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7scatterna.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7scatterna.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2baa55b9-4927-58a4-a0c1-308fa5b6b98c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7scatterna.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7scatterna.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d884535f-2f20-5780-bd57-d4abc9c9cd61","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7scatterna7.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7scatterna7.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62326f4e-8e93-5452-b333-01027335136e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7spf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7spf.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fbdca34-c743-536b-b4d3-bbc552a7fe85","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7squps.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7squps.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d654314f-16b7-5e36-bc58-092c939ce983","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7sssaa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7sssaa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e17e0285-2566-55e0-b91b-9f46363655cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7stepstostandingstrong.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7stepstostandingstrong.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f7ea0a3-5bcb-59de-8425-6c80e4a2b475","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7suicide.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7suicide.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15c24c05-fe7f-5409-8d9a-6fea23d4385d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7throsetattoo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7throsetattoo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--130fab97-75f8-5d50-9af1-2ea0f8cffc9e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7tirs8.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7tirs8.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8901b7ce-ee37-5465-b17d-874da7c7233f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7tup-shop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7tup-shop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe2b114b-8789-51c6-a91e-034fcfa8192c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7ur7l33sm1l3.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7ur7l33sm1l3.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--218396a7-804e-5afd-9ba5-911ec47f9a1e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7v-suinos.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7v-suinos.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94b40ea2-4054-5a8a-be64-130afdb54b41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7vmassa.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7vmassa.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77d77c14-2a50-56a4-a40a-12d78a6de49c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7xxgamex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7xxgamex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e41897c-0d2e-5696-b453-9a7a9c78a6e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7ykrnftb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7ykrnftb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe618775-7e61-5c14-818d-ff39d7e43b6d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7z4b5q.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7z4b5q.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef9be173-ebd4-5749-8c90-753b6ffe7a19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 7z4k9m.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7z4k9m.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b66a6a9e-b8d5-5611-9f5f-60d3f7cec8c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8-72hairsalon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8-72hairsalon.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6fe3259-c8bd-5ecb-bda7-77fc5005eb94","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8-myaccountok.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8-myaccountok.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84090212-b564-5eda-90d6-7d82f216417a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8-riversuites.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8-riversuites.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a34e752-6956-51e9-88f4-a5e2002a9aab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8020connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8020connect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43c798d8-364f-5720-8ffc-e20d1185d91d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 802cannabiscup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '802cannabiscup.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53604358-de9b-5857-a2db-6c5f159b073b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 808bitcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '808bitcoin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d978b017-7bea-506f-8c57-744b5e305b89","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 808bitcoins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '808bitcoins.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62106275-0e1f-5026-af14-78a040c0f543","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 808crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '808crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9169ba49-caa4-53e5-97ab-3cffb0a7f869","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 808cryptos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '808cryptos.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bf3f9b3-6951-52fe-ae0a-83b285bb4039","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 808techsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '808techsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c122f49-0b5a-5591-9c3a-9371e4a3811f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 809236t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '809236t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfe506e2-16dc-5d5b-932d-2f165cde4c74","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 81-trustfunds.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '81-trustfunds.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbed78d7-83ea-5525-920f-92e9570648bb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 811235coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '811235coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf40f555-e317-5672-8220-489fdde18ee4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 812753t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '812753t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02f3100e-4234-5f7d-b70f-e05f55b6f83c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 816932-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '816932-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdeabae8-8a41-5095-beff-1f149a0977df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 817041-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '817041-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--297abd83-3be2-545c-904e-d3b52a310def","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8171update.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8171update.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d54ead8-df3c-5aa6-953f-de6f30549219","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 817651coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '817651coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb3d271b-b647-57a6-add3-a25916148b80","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 818671-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '818671-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--466293e1-d1f1-50e4-9883-61b945c383b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 818vaultservices.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '818vaultservices.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73435ca2-6177-5feb-b6f3-a854e0c1b1f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 819237coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '819237coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b35d9347-a8e9-5ca6-be58-3f119a7aede0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 819624coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '819624coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3675b611-a1d8-56f0-90c5-4b14869d546f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 81sarirbrubonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '81sarirbrubonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--462ef4db-cecc-55ae-b605-10cb69e46abd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 81suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '81suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0eec9b1-e03e-529b-894a-72d1e59f1c16","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 81trust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '81trust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03d39fe1-d1b7-5c00-b674-451b736dcb95","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 81trustfunds.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '81trustfunds.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f22c5dae-5d77-5e88-b91d-b37081bb8a51","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 82-trustfunds.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82-trustfunds.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaf76126-fd11-5d36-a067-6999d1c60027","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 820233coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '820233coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85c7f8a3-b10a-5dc3-a0ec-44849b6fe388","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 82093-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82093-trezor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee016569-c712-571d-af78-944850311d58","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 82634-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82634-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c39c356-da3c-590e-b5e9-5b668fea4fb0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 82671-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82671-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4b1c60f-f24e-58df-a47d-b989455c9351","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 82712-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82712-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f82de22-3d54-50d7-9f9f-4c0405e44e25","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 827182-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '827182-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dadd889d-a9b0-5449-ab8a-a95f2032371a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 82732-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82732-ledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5f651b3-2b1a-5eea-acf5-73de9b893fe1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 828957t-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '828957t-kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fa2be1c-8ca5-56a1-bbed-e749c845cb47","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 829372coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '829372coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f09f20eb-fc1c-52ee-865e-2b05f6790572","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 829491-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '829491-ledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba811893-08a7-5e4f-85cb-20af8d9532c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 829531-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '829531-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e7f2417-3ba7-53ce-9c35-e1c0b07038ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 82trust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82trust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1416669-6e4f-52b0-b628-be8c0e594ae6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 82trustfunds.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82trustfunds.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f34da3-da9a-50d6-bdab-46cec38bb5f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 831248-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '831248-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf231751-4791-5677-86eb-8fca62f0166d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 83204-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '83204-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23965364-7246-59a5-88cb-540927024b0f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8328946coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8328946coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98e187b5-8ee9-5aa2-9da7-f6b53cdff11c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 836021-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '836021-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb52debb-f5d6-5eb1-8f23-735c4f90a842","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 836195-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '836195-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--254641da-2746-5e4a-8de3-22f1c8e615c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 837839coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '837839coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9701d75-4b6c-5fb7-8684-bd75f2b41c2e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 837951coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '837951coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aa74ad4-c1ef-5caf-95e4-962c0bb44969","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 83badmintongindonesia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '83badmintongindonesia.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a757ecc-8e75-5844-819e-245addc4b09f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 83dkbe.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '83dkbe.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9095146a-465f-5b3f-9f60-0e32d977988d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8437233-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8437233-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa52bdba-17b1-5c4f-a214-733067c1b5d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 844195t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '844195t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85030da6-20f0-5de4-9b5a-01a35f5368cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 844442coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '844442coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b3da918-5f0c-58e9-81e0-1e12f0198846","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8460317-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8460317-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91a280b1-ede6-5aea-9d00-dbc1b2beaa21","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8460317crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8460317crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--848d5b99-abf1-5c70-a67b-7572caf437a5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8473-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8473-kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d12447b8-ff1c-5cc0-98a3-5a7dee493e0d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 848015-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '848015-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ebda094-4db6-56c4-878a-23b5e124e281","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 84973-exodus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84973-exodus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81283aaa-cb41-502c-868b-4349399df9e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 850175-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '850175-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72d26d9e-4382-5bdf-8873-c4e0cc20e290","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 851202t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '851202t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb9b45cf-b6cd-5ec4-9d68-47862441503e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 851662-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '851662-kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--222cf37b-ddb3-57e5-aae6-adce803857e2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 855499coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '855499coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99cbc4c2-b256-520e-9e60-2ec58db8ad02","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 855comfirst.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '855comfirst.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c60a816e-d0a9-5a0d-b03c-063990eef983","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 856393-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '856393-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d09f21fd-69a4-5283-b571-57ae523642d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 856393-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '856393-icloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58703164-b61a-52d7-bb01-e31bf8c5b8dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 858694-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '858694-google.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42c96e64-3d28-5bdf-8f37-edbf0e57dcfa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 859023-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '859023-icloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da1887c8-322d-5dbc-8b1e-263b664ad9d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 859032coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '859032coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a39e8927-5732-56f5-8c38-cb66d357c318","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 859043coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '859043coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3b7f5cd-61bb-51a0-ada7-b843bbccdafa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 859132-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '859132-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcc2dd38-8f9d-5fac-9bbe-e4d3a7098a95","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 859353-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '859353-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--145dc3d2-b668-54ee-bae1-c44ac08b5453","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 85cryptotradindonesia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '85cryptotradindonesia.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b6f681a-e5b9-5902-80d7-7cee566ecc3f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 860lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '860lunabet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4a5971f-c2bc-596f-ba8d-154504950f2d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 860support.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '860support.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd642796-dc94-5276-8144-1a5b67a4797a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 863728coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '863728coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--847dc029-3c82-57bf-a23e-8e82fb0718cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 864feb57ruary.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '864feb57ruary.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9c43ec6-fe32-574d-81cd-a906193536bc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 866382coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '866382coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05b84811-385a-547a-8302-32fe12b6fb34","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8668.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8668.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21017dc3-04c4-557e-a32f-3dfe92fdf3ff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 868us.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '868us.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--546e5b3c-b77a-5d40-a900-8ec5fb0733aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 86repairs.bio","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '86repairs.bio']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--138de646-31fe-5c94-bb5d-cc86c4661d58","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 871562-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '871562-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49387d1f-dc2e-5e47-92fe-fbcd62b0c66e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 873643-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '873643-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b04ca31-d489-5eb0-9cc2-fe126aa4b5eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8739.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8739.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbf06a27-0eed-5e38-b90c-cb615abc81dc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 873983-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '873983-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b6e38f1-6f05-5c9f-8fc1-df63b3265b0b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 874709coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '874709coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26425cb1-4dbe-56a9-a2a4-9b2a41c8d021","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8754623coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8754623coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac02f4b2-f2f7-54e0-ae4a-7c0514d8807a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 879840-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '879840-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6524caaf-7972-53dc-b68c-7fd5aa201a6c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 87chattingmeindonesia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87chattingmeindonesia.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ea8ab3c-e363-5ca0-ad08-456d62d2c218","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 87iavv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87iavv.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd740621-3daa-5eab-ae69-1e2b0c0beade","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8811aatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8811aatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e374f2c-a54f-5c11-8814-a9833663e47d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 882340-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '882340-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b6a0a2d-6397-573b-ad17-0e8128ac9216","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 882668.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '882668.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca7a76a3-63ce-59f0-af19-6d6ff1d91131","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 884273-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '884273-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72160f24-a556-545c-828d-cc5c095fc838","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8848microsoft.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8848microsoft.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a789c90-4108-5843-af2c-7a8326912fe4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 886431-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '886431-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05053871-abdc-5c72-b1ed-8f07c3e6bd2f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8874510-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8874510-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42bc2a4c-3c8b-57b2-a4f3-ae14c2f0ec40","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 888-starz-tanzania.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888-starz-tanzania.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17ae616c-d842-5943-92f0-36e7ba15d0e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 888210-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888210-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3dd650a-765b-5cc3-99a3-3ad9021f3db2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 888555bofa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888555bofa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac53f2ab-70c2-5640-a31c-2153a25988ba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 888att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--961a771e-7ee5-5d73-a606-c3d1362c4e32","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 888battiger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888battiger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--900828a5-722c-5498-89dd-94711d21a978","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 888bonanza.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888bonanza.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16e14e03-b35a-5d09-814d-f1b4658a127f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 888gamexb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888gamexb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da3505c3-7b43-5778-8f58-fae50358fa5d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 888gamexr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888gamexr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1356c094-304e-53e5-aaab-8e5d6e93ab51","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 888irbca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888irbca.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8958be22-0684-5edb-bdc8-6cd21d4e8906","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 888rainbow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888rainbow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a48a41ab-66f5-5138-9506-d7b5af79b2ec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 888scatter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888scatter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9078417-d952-5e27-a2d8-37b4a9b271dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 888scatterslot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888scatterslot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0cfebc4-d8ca-52b5-8e27-7246d8620343","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 888secure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888secure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f0f81b5-4135-5013-a8ea-fe11a684e1eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 88aaatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88aaatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8661a3a3-14a4-5494-a82a-eb5bdf9bf662","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 88aattt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88aattt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddd62753-f45f-5df1-a392-f49366bdfa5a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 88bmovie.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88bmovie.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--601d046e-52f5-5a1e-8e3d-dbb7eb041308","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 88clups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88clups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e758a54-41a0-55cd-b5d2-4d089dd6535b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 88dfav.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88dfav.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17b6b316-81fd-5c58-a449-c4274b6a45af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 88qfjn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88qfjn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8680f3c7-f4b9-5569-80ec-cebdd8056155","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 88qfjnp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88qfjnp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37ab6ec9-8455-5dd0-99c5-39f378992394","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 88rainbow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88rainbow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--580cac71-8886-5c66-bcb1-85dea048009d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 88strong.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88strong.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff2205b-2e0e-5e38-8380-7f63a0766b31","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 88token.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88token.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f377b32b-781e-5f3e-8eb6-84991c809c92","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8903476coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8903476coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--273f4873-35e0-527d-a72d-20cc6b908aa0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8905239coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8905239coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--191b77f7-f5e4-5478-b12a-318a573359f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 890539crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '890539crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--844c4ca4-5282-5de5-944f-0d51c840390d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8908259coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8908259coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e06597f3-79f7-5239-b056-b1ca3b0c96c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 891211-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '891211-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--def909d2-4168-5147-b480-942f523482e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 89132-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89132-trezor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4f33622-1685-527f-ab77-44433c0fb4f4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 891905coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '891905coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ac7f712-8b90-5553-b84f-9ce0d7f0a601","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 89214-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89214-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--901633c5-b4a4-5bae-88fe-a33c4274a635","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8926523coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8926523coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22ab2aff-a081-55ac-b923-a212c333ab34","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 892784-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '892784-apple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff6b40d-230e-5974-b856-a56a71442c53","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 892817-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '892817-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e361e37-de53-5c5e-a0d9-c3aefbd747f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 892946coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '892946coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dec3a2d-9164-58e1-9c2b-768bd1249fdf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 894938.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '894938.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--706ddc68-617d-579c-8c3e-8e08ce926902","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 897795coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '897795coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5df063c8-dbff-58d0-a521-3012b4283f9f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8bmovie.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8bmovie.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97ef4650-e664-5ff7-ba8e-1a197e65fce9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8citiesnb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8citiesnb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69ce1c0e-6a42-553e-91b1-ee32f528114f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8e5trad101n1own.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8e5trad101n1own.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c0b3e5c-1c9e-5188-a60c-db5c1a7737ed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8emmissaoo.bond","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8emmissaoo.bond']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0de3127c-8196-5c71-843d-0d00b49ece2c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8f6k2m.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8f6k2m.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26daf69b-e7d6-52a3-8422-28c3dc5152b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8f7jw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8f7jw.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a67cdf57-f6d4-52e5-a3a3-2f31056b1c19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8gessam.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8gessam.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67233ace-98ea-5f79-a0c0-5a969ee531d3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8hnfty.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8hnfty.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14fcd537-e1b8-5a75-acd4-1fc464baf41f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8irsxp.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8irsxp.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7b7f81f-35b5-536c-a801-a19cfa2178fc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8jrrbc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8jrrbc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0b9fc03-6b52-51c1-8049-b0652564686b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8k3678m.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8k3678m.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10bc15b9-2ffe-5598-8c96-045e17a24f49","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8kn7xwt.qpon","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8kn7xwt.qpon']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b6dc37-84d5-5081-b1b6-0513b0f1ba0b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8m5f3k.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8m5f3k.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06b0dc58-ca35-5d6c-8277-1ba27dd59b14","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8mav260.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8mav260.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72061f67-ec89-54be-a3ff-9ce23bc06a33","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8n9v2f.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8n9v2f.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd55d406-c545-59aa-a101-e3c2afc6f910","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8odkbu.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8odkbu.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ca398d2-13e9-52c0-a95a-42883b86e5b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8p3w5t.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8p3w5t.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5418c2c6-a79d-5a1a-a3d8-f55659891015","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8pmsatta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8pmsatta.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cc97652-6985-52ac-9b7e-d6937284ac62","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8rsui.zone","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8rsui.zone']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b0398db-b698-51f8-9ac8-7f93538b8c2a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8scatterna.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8scatterna.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--799f8395-b470-5ac8-a868-a6c0450afb80","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8scatterna.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8scatterna.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0a4e218-58a9-53e9-b754-a43d855b41e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8scatterna8.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8scatterna8.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--532f4045-837d-52bf-810b-fe8e7b8b9cf9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8sssaa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8sssaa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944937da-ed93-56fc-b3a0-9fba21cadb51","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8t3p5w.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8t3p5w.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15ccfcaf-b6f0-5d48-871b-3d62fe5c46de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8thstreettattoo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8thstreettattoo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5deceb90-be65-50c8-b372-ca516852af48","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8u88l13s3v3rywh3r3.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8u88l13s3v3rywh3r3.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d94ae8b-3eb6-5582-87ca-b00e38cf009e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8vz2mxr.skin","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8vz2mxr.skin']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9883e5f1-6bf3-505f-98d4-25e758c27f6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 8xdkb9.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8xdkb9.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a2e94a1-f1f4-5006-8b4a-5ec8431bfa76","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 90033diskup.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90033diskup.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b52e0c9-d448-54b9-9a4e-6698867cc562","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 900672-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '900672-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66325b10-1360-5ef8-ac05-c5ed077afbac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9012758coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9012758coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04b0be53-fcbf-55af-9c7e-f5a148d5d224","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 902182-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '902182-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87c69b1c-4e79-5ade-a0c1-53c3a490dcd7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 905088coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '905088coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8cbd2ae-f6a0-5f96-b1a9-d6a9f7e4c164","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 905325t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '905325t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0c13b27-be6b-5aae-8047-4b3e67ba080b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 907932coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '907932coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63d50b7d-f634-58ad-965c-a14a879a9fe1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 908288coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '908288coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17f73aa6-155f-5fa8-9e18-c1633324d52f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 908803t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '908803t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6303f6f-cf3d-5c12-bd64-801737239306","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 909182coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '909182coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84c8b69e-d64a-589d-b536-8c4d51636685","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 90hqsnabin.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90hqsnabin.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ebe9f03-35c5-5925-8074-9724a4046bab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 90lulu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90lulu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57f01819-6326-525d-8ca5-43bc5f9b1a91","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 90phutbg.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90phutbg.cc']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe1fa2f3-1e1b-54d8-b4b3-c25b0e6e97fc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 90xwrd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90xwrd.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc8d4775-0d49-58a1-82c9-a5dfa9f2e13f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 90xwrdv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90xwrdv.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64f9090d-c8c7-5a1f-b84f-7333691faf2e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 91-mintspg.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91-mintspg.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8441eff1-1505-53ad-9148-2e2cbf00b51f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 91-wanzhengban.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91-wanzhengban.wiki']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b7ef8a5-b69b-5589-a488-31d56fdf8750","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 91051-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91051-kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21ae7634-6f34-5fcc-92de-88dec135989a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9111outlookrocktrail.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9111outlookrocktrail.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--924cece8-7fe7-5d30-a997-8c67ea2ba6b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 911accounts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '911accounts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea613c08-9233-5e07-8067-71476196b783","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 911heiliaoddhl.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '911heiliaoddhl.one']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--569103a0-b0b7-5af9-b8ab-28e68584c492","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 911lawsuitfunding.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '911lawsuitfunding.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8363365f-4243-5f4a-a42e-692eee175bdb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 911lawsuitloan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '911lawsuitloan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5c1c29f-ff32-5270-852d-18ae42f1d975","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 911lawsuitloans.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '911lawsuitloans.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f1334ab-eaaf-54d0-9fe4-68c672541145","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 914742coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '914742coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1effeb1c-a081-5e7e-9f11-9d69158af17f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 917430-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '917430-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ef09c9b-f55a-565b-839e-f84c037f2f3e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 917431-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '917431-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28a24d14-249a-5ffb-9b66-8740abda8919","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 917582-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '917582-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d03fb9bf-a6a3-5b2f-bf6c-f49d2f94a04b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 917856coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '917856coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb08d7ba-950a-5d31-aad9-367cd60eb0e9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 918182-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '918182-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78ea496c-fb2c-5b6d-b1d0-7e834f58221f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9182-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9182-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3ec5b01-44cd-5f77-9b94-61a125c725d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 918278-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '918278-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8de92dd-6451-58fc-b07f-50d577aae866","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 918352coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '918352coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52db36d3-85ab-5dc2-b779-cc47e7a4b9a3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 918kissagentsmobile.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '918kissagentsmobile.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c79b1ad5-8563-5de2-a301-9f95f227d067","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 918kissauto.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '918kissauto.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d83015c-da59-54ce-a9a6-c7a128f17c8f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 918xx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '918xx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a071118-3a92-53f5-94a7-1aa6778c5a3c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 91banzhu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91banzhu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b826ddce-03fb-5c64-9d2f-73a96e0e7d59","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 91chiguatt.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91chiguatt.wiki']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f9beef9-2531-5ed0-bf98-b00afb6677b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 91chuanzhang.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91chuanzhang.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cadf878-ab5e-56a3-9841-c53b41e9c4fb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 91essays.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91essays.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e6c2249-721b-5e1d-aaf4-7f445f99392f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 91heiliaodhl.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91heiliaodhl.wiki']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23eafe4f-d3b1-5ed7-9eba-0786d417f7d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 91hlwddhlw.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91hlwddhlw.one']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f8c4f15-888e-5fed-9bbe-a5a1c9490abd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 91industripeindonesia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91industripeindonesia.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c72dc5f9-9c9e-5f7d-b9c7-cfab6e7fddbe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 91massage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91massage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2f891ce-1a2b-597e-be02-e4c855f9450e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 91rbc5p4su.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91rbc5p4su.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cde2337-5e5c-55a5-ad09-af3d0cc19bc8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 91rbctf3f4.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91rbctf3f4.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c94fb16e-82b2-5356-a56e-ae644b79476e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 91strong.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91strong.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c56be6e1-1647-5591-9567-cb74c2c00985","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 91suipai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91suipai.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b80e79d-a378-5175-a9f8-d9dc35bd5195","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 91tiktok.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91tiktok.wiki']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eb57013-d4c8-55f9-9047-ac443961a095","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 91xj350.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91xj350.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb2bb82f-4377-5e91-bdc6-644d68f9483d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 91xj361.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91xj361.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32dbb1ca-fbe3-5660-b045-871dc826d90e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 91xj431.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91xj431.cc']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6af8aae9-98c0-5d28-bf59-f8542e0c4ba6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 91zaixianzs.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91zaixianzs.wiki']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--446bc75b-4472-5d86-92c5-81f98bbc5481","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 92045-metamask.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '92045-metamask.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef9a4d34-7888-532c-95a5-75c3e42fe119","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 920883-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '920883-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e34f74a-fdf4-5d98-88f7-8ff0b7972abd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 921firstdr.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '921firstdr.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9a92340-0635-5428-bff0-5b64e1d61c4c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 923200coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '923200coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a514ad6f-f392-5491-8302-5b04da21cdf3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 925651-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '925651-google.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29c2c5f5-bed0-56b0-a2e3-f73db0cbfe9c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 925854t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '925854t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ecfab91-cdd7-529d-a854-db5aba9dbe89","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 925thefarmradio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '925thefarmradio.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a30ba693-5dd2-5d97-a925-7fc20731e98a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 92chattingkoindonesia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '92chattingkoindonesia.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf8a0708-9674-58a2-bd8a-5b5508a4f411","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 92jnab.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '92jnab.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f70760e-c0b2-596e-ba47-0cbf336e6573","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 93108strong.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '93108strong.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b668432c-8df7-54ff-b531-0e4977d92622","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9328594coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9328594coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f678601e-5c32-5204-ba0a-b0d2e5aecb91","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 933lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '933lunabet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9d9588f-3aac-5621-9b23-158127dabd25","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9347525-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9347525-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51bd9155-2647-53d7-bd14-c33c681045d0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9357525-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9357525-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72e5e5df-a8f7-57a5-a09d-f6bfd6a25455","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 93614-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '93614-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23da1c5a-9183-5510-9a3b-2b712034d68d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 94103-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '94103-trezor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7b3d497-f7d2-5ad2-965e-27f1cadb9fea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 942402-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '942402-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09d48b9-eb35-5b25-8e68-f1fac89d4251","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9428463-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9428463-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da6521aa-9ef8-5539-b4f1-962bd8734259","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 943thebridge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '943thebridge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf6b6789-592f-532d-a4fc-918c92e6a8e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 952184-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '952184-apple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed194ea8-f800-556c-b0ec-b614a1ca4831","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 952412coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '952412coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6cecc28-26aa-57f5-a4f4-d5c8650a50a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9529862coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9529862coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--405106a6-4085-5c70-a33d-74e9192db35c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 952lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '952lunabet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--001b8af9-8f03-5e20-ab0a-ab696454d8ff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 953852kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '953852kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc372a75-8078-5ba1-8c1d-0c46cb0af3a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 954lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '954lunabet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dcec275-0c41-5e84-be3c-f730d23fed86","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 956lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '956lunabet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a7498d4-81e4-5b2d-954e-f1ea2977d072","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 957715-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '957715-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf40f127-0e72-5222-aed2-c080548f1fe7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 95anz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '95anz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e4bb8b9-8ca4-52db-a9e2-b6ad04696a85","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 96anzpp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '96anzpp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec3fb29-0cba-5879-9ba0-861b6563b7ec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 973211coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '973211coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89cbf16b-27f9-57b2-b4f0-f85472c7ac24","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 974944coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '974944coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdfa68f9-e40c-53e9-ac26-667154795968","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 97653-cb-support.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '97653-cb-support.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6baf1d2-0023-588e-97a1-bae9d7d054f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 979216.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '979216.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b61f963f-b091-5db1-bfe0-a9ce1668f503","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 979236.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '979236.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ca0a367-c565-55de-b7e3-272cdb14e1e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 981331-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '981331-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--615e3507-2e35-51ae-af5e-91ed0a7b5dd1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 982387coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '982387coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--483dd823-f9d5-500f-979e-b7bb0463fbd4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 982581t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '982581t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84672cb9-0fad-59bb-b6ae-976c5cc03490","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9829544coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9829544coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0397182c-cfb8-5b26-b4b9-0ba81f247004","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 98363-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '98363-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e148eb6-07c0-5ee8-bf5d-a22c66ca2632","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 98373-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '98373-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9316d49e-51cd-5b46-8bb8-0bcc90d29383","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9854125-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9854125-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6f03208-aee4-52b8-a2fb-259ee3aeae4f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 985455-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '985455-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--796f59d7-5115-561a-b729-a3303d7a3824","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 985web3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '985web3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c044e4c-5cee-5284-bd72-792b59070db1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 987432-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '987432-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50037228-f0c5-5e75-86f8-b9dda007ce24","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 987upshopeepay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '987upshopeepay.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--063a6087-8b42-5167-a911-c593d4263646","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 988suicide.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '988suicide.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfc59209-7e1d-50b2-86eb-5684e27578fb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 988web3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '988web3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b186c5b-38a1-5b1e-96ed-259ac3a79169","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 989308t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '989308t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cf34140-bba9-5822-9e3f-8e1554c42dec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 98suihm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '98suihm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f33739f-df4c-5b9b-b538-adb258f77616","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 99-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99-connect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702c47da-dade-5084-a779-faf2ea906ddc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 990321coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '990321coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--004362d9-b8a3-53dc-b8d1-54f45258c7b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 990324coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '990324coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--873781dc-e5a1-5717-ac77-0ec7c3aa2ee1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 991823-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '991823-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10febdc3-02cb-5334-b187-b60a6cefe645","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 992837crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '992837crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eafb2cb-0c8c-5ce0-87e5-2d5895233c64","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9932843-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9932843-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72174aa2-d56c-5ba8-94d0-ec34b48efb5f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 996gmail.bond","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '996gmail.bond']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2c53ebb-7ff4-523a-b6e5-9c37f67771b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 996gmail.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '996gmail.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd19a488-bdc9-5832-9bf2-095f99334433","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 996gmail.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '996gmail.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf50f2a1-64ae-5b11-8aa5-50405a03b48b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 996gmail.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '996gmail.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4009977a-1d3a-51db-9106-6b98bcd8b2e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 997239-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '997239-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33d67c8b-ed96-514c-924b-9be6838e5e69","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 998223-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '998223-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8dbce51-99fe-534f-a0c3-f7e3ab0c4e88","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 999117-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '999117-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1bc14d8-45d2-50b9-a822-108b0bc7d581","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 999rainbow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '999rainbow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be1af0f1-d6d8-56c8-a08d-ca8f510891fc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 99aaatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99aaatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ec70deb-7650-58e6-8840-3f6b83546a7c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 99aattt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99aattt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--226be7c3-68c6-58bb-9832-d5eb41fb0449","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 99bitcoins.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99bitcoins.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2882a56a-6675-5f15-ab0d-3d823c7809ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 99guibinaccount.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99guibinaccount.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--530dc5ae-00f3-5f35-a933-cbb3a22b6d41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 99passagens.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99passagens.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f601b77-8bdb-5625-9b5c-46eb9e032cf2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 99rajawalidomino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99rajawalidomino.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b28c1cf-2c4d-5a10-8d60-0282e2d15c02","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 99rajawalidomino.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99rajawalidomino.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1186b212-59f5-52fc-9f2e-45a0fcec2664","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 99rajawalidomino.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99rajawalidomino.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95d9ef75-c856-531c-974b-7602c703a586","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 99shopify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99shopify.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dcc4d2e-6718-51ad-b5fa-7e4be4d75f7b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 99togel.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99togel.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52b3aa7f-7466-51ec-8a96-2452239f9c60","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9attjo.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9attjo.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb50ae6a-1403-51b9-a406-7caf0e7fbffd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9b6x2v.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9b6x2v.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be5c9098-c828-5ac2-8916-9a0373134416","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9ckanzy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9ckanzy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a50bfa85-2295-55f1-afef-55502c216b8b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9connect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af8167b1-b965-560b-9f7d-d81fc05dc98d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9dkbli.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9dkbli.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d985312f-4d2e-5797-b173-f29c7f1fea5c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9fbmo.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9fbmo.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6e1e697-e084-520c-80a5-ac18bac0a68c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9g5tpaliexpressfp.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9g5tpaliexpressfp.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4afec0f-defc-5149-9910-cf03f39e67e1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9googgllemeetts.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9googgllemeetts.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2faf9755-4d32-5cec-a2d7-705f47de4b3d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9goooglemeetts.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9goooglemeetts.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d0a5be-b6aa-51d6-9fb0-9251e7e72e5c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9h3b6t.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9h3b6t.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c810352-bb70-5f18-8da4-5b6ffaa906f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9icloud.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9icloud.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--838dd008-57d7-5b88-af05-85ad171f4f12","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9itmr1lzaltn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9itmr1lzaltn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c87475b-ecd4-5e88-82ca-915225e82afd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9jahitbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9jahitbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c6afed5-9af9-5ada-b7c3-9bba517dee22","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9jatrust.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9jatrust.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06738d3e-1863-5744-86ab-723c72bbb90a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9kqbmo.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9kqbmo.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f840c9bf-0bf3-549c-b215-fdd321a75d4c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9n3w7v.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9n3w7v.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8105ddb2-75a9-5697-b326-3c66aeb1f7b9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9ooggleactivemeett.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9ooggleactivemeett.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7c7d14c-3716-5ef5-a436-f499d636760e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9ooglemeetts.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9ooglemeetts.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c0abe0a-cd0b-57bc-b0e2-71b33b147674","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9p2q4t.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9p2q4t.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaad5e17-910e-5d13-8e95-68ce9de85c71","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9scatterna.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9scatterna.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e97f0b3-a38b-5b9e-8933-64f04224bf5d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9scatterna.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9scatterna.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b249048a-27cf-5821-8a66-08280dce8ed6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9scatterna9.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9scatterna9.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6610be6-1b76-551e-8cdb-39dc713d645d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9sssaa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9sssaa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f02dc7f1-9a00-5a1b-bc8a-456d08fc2f41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9suize.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9suize.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1375b3dc-6d29-55a0-9fb5-43dfda56c930","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9t2b6v.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9t2b6v.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87fd6c00-5e50-5805-918e-75fcc9cbb1d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9t2p4q.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9t2p4q.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--545dc21c-d536-5477-bb14-f1c98cb77385","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9t5nab.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9t5nab.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ea6c5ea-60ce-525c-a06e-83d8f3e3f1a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9tiktok.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9tiktok.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--695b36c1-8867-5aad-bb62-e1645aefc7f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9tumza4dp4o9.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9tumza4dp4o9.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e69ff83-7734-586f-b1bc-7c6d0b2cb17c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9twbofanghm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9twbofanghm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b25876d-bee6-53b5-aae5-3ee4458ce8e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9v2t6b.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9v2t6b.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58059b1f-7248-53d3-b862-87b2549ad539","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9w3v7n.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9w3v7n.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22a3c4e8-3a9b-5863-b751-be63dd388731","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9x6v2b.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9x6v2b.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a1d5230-e0d6-5a2a-b4a6-a7a0710fb3b9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: 9zanzd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9zanzd.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1bed639-a85e-50f3-a9e4-28440151f1c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-101-eylulfirsatlari.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-101-eylulfirsatlari.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0de2daf1-6bea-5cf0-bf77-c655a0cead76","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-amazon.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-amazon.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a257e37b-914f-5370-8c03-cddc4000e2c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-amazon.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-amazon.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331499f8-e2dd-5bd0-9f93-9d9fa001bd5b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-amazon.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-amazon.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d20750f9-2a31-5fa8-ade0-796b6fbd715b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-apple.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-apple.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e103f28-9574-572c-b34f-2e118793fc67","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-attractive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-attractive.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34cb631e-d3f2-57fd-ae6c-8f22472560ae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-c-repairs-near-me.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-c-repairs-near-me.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0293ba18-476d-5acd-8f5b-38d605e3264a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-c-repairs-near-me.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-c-repairs-near-me.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4368aa-4570-5883-be97-9dee0ee5de85","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-citizenm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-citizenm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a24134a1-64eb-5d30-9644-163867c24ec8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--719ce03e-b15e-5e2b-bd12-5ea1ebc64f33","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-dhl-post.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-dhl-post.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b67d6c7c-fd4d-50e9-8f58-11fbda4006f4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-discovery-of-witches-season-4.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-discovery-of-witches-season-4.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cdbe90f-cde9-5024-a86b-cdc8387c9ba7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-htrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-htrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--379d3e9b-fbfd-54ce-a0e3-5e619e5b1b57","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-ppsupports.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-ppsupports.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbb9c811-5554-5fee-9328-e5906d187021","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-stratt.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-stratt.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c668e99a-1a69-5fed-a312-78519a29a466","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-stratt.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-stratt.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b0f83ae-5fbf-571e-956f-2ce7d3cad972","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-stratt.homes","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-stratt.homes']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e87f9c3d-79e1-504a-aa14-f9fe81839bcd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-stratt.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-stratt.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4339ad40-0926-51aa-a58f-5c445f565f6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-stratt.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-stratt.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08e6e64c-68f6-55cf-9fbd-adc430985999","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-stratt.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-stratt.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1552422e-7c7e-5d41-8401-9d502a54ff98","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-trust-at.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-trust-at.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f8fc09-732e-546c-bfc0-33047a91fd78","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-trust-austria.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-trust-austria.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39e9eda8-e62a-54ff-8e40-c388ac91cb09","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-trust-info.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-trust-info.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56037e20-d528-584b-9891-3be9cfb5bda4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a-trust-online.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-trust-online.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30b61fae-95a0-569f-b220-a1e016103c1d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a095cb2dhl.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a095cb2dhl.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6bdd0db-3dc7-5131-ae66-e10114030806","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a1-electronics.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1-electronics.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c2fd303-cd6f-580b-8e4d-bf975f117c49","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a101-eylulden-firsatlar.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a101-eylulden-firsatlar.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684bfaef-a93e-5e43-ac73-6ed0164ada48","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a101firsaturunlerkampanyasi.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a101firsaturunlerkampanyasi.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b86710f-5cac-5038-9f70-3300d66cef0d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a11yfirstclickforall.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a11yfirstclickforall.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a62f238-782d-50bf-ae93-a4c8831ad6db","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a16ups.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a16ups.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22ff3636-86ae-5bd3-92bb-d59a5c1c0056","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a16zcrypto.box","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a16zcrypto.box']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d1a965b-c6f0-57a1-8ff2-1d64c901ec56","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a1accounting.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1accounting.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f9839cf-0762-5d29-9879-d2bf72b110d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a1adsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1adsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb6c9cbc-abbe-588f-9cb4-6c62f420c4de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a1badminton.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1badminton.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab51e1c-9667-5f64-aa25-ddc58ce4e7bc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a1base.in","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1base.in']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b96ae04-38b9-559c-b41d-8ace32c1b94f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a1carrepairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1carrepairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8baa12c1-089a-5d19-841c-618ff8d87f6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a1cryptotrader.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1cryptotrader.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f257fbed-21a0-5b79-a0aa-b7fc4daa6395","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a1golfconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1golfconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37120a91-b22e-59d3-a415-62ec84378fad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a1mwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1mwallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684ad7da-adf7-50f7-b9e7-4194cbf7c401","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a1safeandvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1safeandvault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da8ae9bb-e74c-59d9-b3dc-bd2ff1e414b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a1si.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1si.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5301d98-2156-532f-8d3c-23da430330bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a1starmedicare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1starmedicare.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b1925e-ce50-5f2d-a67b-e12e3a3ce10d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a1support.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1support.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b95a0c24-242f-5d35-9d30-83210ab9b3f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a2-globalelectronic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a2-globalelectronic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d6078de-f1c0-59b4-a54a-83c83b00cf3d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a2-globalelectronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a2-globalelectronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--232a8991-45f9-5f7e-b48b-02c11998c476","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a2aelectronic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a2aelectronic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eae1669-087d-5a95-b4c1-fc9d89bf3e0d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a2afirst.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a2afirst.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ea45e1b-5c43-5037-bfc4-f0cc69bb531b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a2globaleletronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a2globaleletronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c59fe80f-f936-51c4-b901-31f501073e41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a2n-groups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a2n-groups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--602b9ed1-8b04-5f44-b8f0-73eaa2f22cd2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a2verify.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a2verify.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea6623d5-eaf2-5302-9916-925816ace429","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a2ztravelvisa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a2ztravelvisa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5b1ac5-3de6-58d8-8ad8-c936b02faed5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a360-crypto-friendly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a360-crypto-friendly.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--998baef1-6449-53a1-907d-341e7c737c19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a360-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a360-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5f77393-abec-594d-8c9c-af4f54b6cee1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a3ion.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a3ion.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fc9dac7-3383-5eab-8772-a849b6560c5f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a3jgroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a3jgroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf946d94-8266-52e1-80a8-ca21def1ddfe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a3token.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a3token.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--298896b9-9553-5d6a-b80f-e4c5ff692db4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a5hi9ha5th3sky.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a5hi9ha5th3sky.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3abf211c-fa56-59b4-8c3c-10c22a5a76ac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a5l0n9a55un15up.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a5l0n9a55un15up.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f918518-a00d-5791-9557-d16d14e6397b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a5m4k.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a5m4k.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7ddfaa3-9e70-5aaf-8b7d-f1267dda833b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a6c2j.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a6c2j.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36c3dc16-2fc0-5989-bb4b-ff443f5871ba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a7visas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a7visas.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80bc81e6-51ab-5dea-81cb-9caf08c0d368","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a7w5p.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a7w5p.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cec7019e-abd2-5a26-a903-afcc5cbce8da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a81nft.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a81nft.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7feddf65-faf6-5b04-b297-4818465dafe3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a8odhl.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a8odhl.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12449fd8-72a4-50b2-acda-0f28bb6db525","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a8update.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a8update.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfbf9ea3-50b2-588b-acf6-b158e691968c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: a94.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a94.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4204a9bb-3925-5a06-b1ad-52d2711b23b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aa-groups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aa-groups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5416eb0a-7811-5530-af88-05ec9370d5b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaa-battery-replacement.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaa-battery-replacement.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efdd5286-f9dd-5f7a-9714-35b6bb4496e9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaa-battery-replacement.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaa-battery-replacement.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d70b50f1-dd0f-51c3-827f-4c2d14130364","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaa-chase-haaaa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaa-chase-haaaa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f34cc3e0-4043-5b08-b5dc-4843aaaf5403","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaa-chase-paaaa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaa-chase-paaaa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32d3350f-5db6-50c6-815b-e5a9c7d1692f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaa-chase-saaaa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaa-chase-saaaa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5fa1833-3ce1-5e3c-a808-6431057631b4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaa-chase-xaaaa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaa-chase-xaaaa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa670883-f018-5d3f-a044-96929e942519","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaa-matthew-haaaa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaa-matthew-haaaa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c792a6df-ce8d-54a0-8808-ca1157351ef1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaa-matthew-paaaa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaa-matthew-paaaa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af2e0961-4093-5d88-9b53-9a7fa827ee2f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaa-matthew-saaaa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaa-matthew-saaaa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da1eb0c9-7911-5608-b8d8-813dcaaee5c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaa-matthew-xaaaa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaa-matthew-xaaaa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31611912-6a89-5124-a26a-b2aee3da1e1b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaa-outlook.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaa-outlook.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87e8848f-3782-5d04-9b7d-23510cb660de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaa-wyatt-haaaa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaa-wyatt-haaaa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--304bea8e-046c-5b21-936c-782136ff7040","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaa-wyatt-paaaa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaa-wyatt-paaaa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90e0cbb2-e1ca-59a0-9a13-20993e4270f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaa-wyatt-saaaa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaa-wyatt-saaaa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cd9db72-397c-5504-a2d8-3ec48672b176","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaa-wyatt-xaaaa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaa-wyatt-xaaaa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fde0f722-ef11-583c-aec1-7077c43e1f6f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-hassan-haaaa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-hassan-haaaa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f64ee957-7588-5baf-9e03-07c527b93603","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-hassan-haaab.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-hassan-haaab.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c453a665-2c0f-5656-9168-59b4e7c99e60","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-hassan-laaaa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-hassan-laaaa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b198ba24-a4ba-597a-80f0-18ccd58caa4d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-hassan-paaaa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-hassan-paaaa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--718ccdb3-22dc-51b7-b9ed-f1d4a5496066","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-hassan-paaab.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-hassan-paaab.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc262844-2cad-519b-842e-2ff782158d44","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-hassan-paaac.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-hassan-paaac.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c7c752c-1856-5430-b28f-5abc43928a96","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-hassan-paaad.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-hassan-paaad.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db825ad2-03a4-551f-bcd0-3f1dd7ac9005","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-hassan-paaae.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-hassan-paaae.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d23482e-688c-5758-8e5b-b3c3d3d4d7ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-hassan-paaaf.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-hassan-paaaf.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9afb2e3c-fcce-506c-87bf-d74cbc557b82","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-hassan-saaaa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-hassan-saaaa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d07972af-c74e-5177-adef-733584ee1830","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-hassan-saaab.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-hassan-saaab.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc52040f-10aa-5a34-908e-f70321c92d9a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-hassan-saaac.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-hassan-saaac.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f267b0bb-ae6b-5172-9df0-32291fa7bcda","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-hassan-saaad.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-hassan-saaad.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e62f5834-ff3d-552c-8add-ad7fc766889a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-hassan-saaae.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-hassan-saaae.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd197440-d8d2-5303-a8d7-0a9613162e0a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-sassan-haaaa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-sassan-haaaa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8c78425-cc03-5042-978b-ee72c9ec1f3b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-sassan-haaab.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-sassan-haaab.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c231dc2a-bdf2-5341-8896-c33ee59b5e52","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-sassan-laaaa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-sassan-laaaa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d78062f-1fff-5f54-bb71-73117dea041a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-sassan-paaaa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-sassan-paaaa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a83a69c-fffd-5a95-9eee-ec6181d9790a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-sassan-paaab.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-sassan-paaab.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd20e31-1802-5bd9-a6f2-c0a02077fd5e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-sassan-paaac.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-sassan-paaac.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84ab6d39-be8d-5d7a-879b-2b1efc3ce67b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-sassan-paaad.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-sassan-paaad.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57d1025a-ff37-5e65-b95d-700658720c9a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-sassan-paaae.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-sassan-paaae.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b828eb9-a64d-56e0-a592-d03cf6efd711","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-sassan-paaaf.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-sassan-paaaf.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7dca61e-199b-55e9-9d11-d513eb81ce94","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-sassan-saaaa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-sassan-saaaa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd1ac6b8-b34f-5194-b708-2b2dacb6b2d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-sassan-saaab.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-sassan-saaab.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb1b3481-0286-59b1-8f75-2b9fc224c883","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-sassan-saaac.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-sassan-saaac.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d65b61dc-b36a-5eaf-8161-c7b1d88a756b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-sassan-saaad.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-sassan-saaad.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6caafed4-bb43-5115-921b-54492a1c3bb0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaa-sassan-saaae.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa-sassan-saaae.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22ad305d-33d5-5c9a-ac04-7c6c4dffbd16","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaaaco.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaaaco.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7104d05-12e1-5b71-9ceb-3f14dfda7cea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaafsaneh-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaafsaneh-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--357fde5b-bc8d-5c72-9452-15281b92afa2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaanahita-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaanahita-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9470560e-22a7-5a73-8eba-362a2f5688ed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaabahar-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaabahar-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e7cb978-9010-55b8-afd9-375adf9b6132","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaabaran-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaabaran-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b735edc-46b0-55de-8eb7-5ea5f413425f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaacalgarycashforcars.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaacalgarycashforcars.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71896bc6-b97e-5171-8ed7-379654131281","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaachista-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaachista-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c646546d-1ec4-52b0-aa86-809181345a7f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaacryptokingdombsslogsss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaacryptokingdombsslogsss.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5ae8e47-9d01-573c-8612-e10b3c8d50f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaadarya-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaadarya-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c5af56a-4519-5672-8a91-f61dd00ff16d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaadonya-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaadonya-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8d6929c-f792-57bc-ac54-a1d7169f4a57","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaelaheh-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaelaheh-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74592a57-a58f-5752-9094-b3e7eeb0c011","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaelham-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaelham-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--850802c7-dead-5631-b152-003c9e80b2b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaafarzaneh-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaafarzaneh-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52602208-9363-533c-9e17-316edb71bb2c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaafereshteh-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaafereshteh-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd6cfd61-939f-55b1-9f1f-b60371c6c431","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaagisou-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaagisou-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee7aca1a-6388-5f02-9932-cb5d25a7f0b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaagolnar-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaagolnar-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09fdccab-539b-5d5d-b403-90774e262656","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaahasti-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaahasti-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--119a4950-268f-54ad-ae2d-fe26860941cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaahoma-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaahoma-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--970a7eb3-9abb-5d9d-9d30-f9987e550e7e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaairscpa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaairscpa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3d6de0e-aaa8-5acf-8855-6c217d235d42","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaajaleh-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaajaleh-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664455e4-ee03-5e1c-a5cf-260e0cc0d7db","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaajkhdgmails.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaajkhdgmails.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac3e68ac-b859-5afe-bb0b-a88770a52665","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaakatayoun-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaakatayoun-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c18ce424-ec40-5996-8549-bf374c5e86d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaakimia-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaakimia-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1bd84c0-72d9-560d-b5d5-bca68fccc8a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaalaleh-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaalaleh-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a06af690-a517-58ec-bf57-cd611e70a8e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaleila-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaleila-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aab79436-2b6e-5d13-ba3c-4115fd086f8f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaamahsa-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaamahsa-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adc38557-fe83-5b04-ab3c-ab6426e214aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaamitra-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaamitra-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6b80d50-2d05-537c-b337-b6ed7556c61f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaanegin-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaanegin-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b7eaf02-6a8c-573a-9d9e-66b8eac1b774","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaniusha-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaniusha-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ee4fd5b-141b-5e3f-9185-9b868fa10c4c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaorkideh-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaorkideh-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f88e164a-5864-5ec4-a882-b16694ed3d79","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaaparisa-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaparisa-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2afcd633-4b85-5546-8249-610d5b310b00","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaapegah-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaapegah-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ba76e39-f39c-58c6-b71d-335bee100060","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaarana-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaarana-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17574aed-6c31-5a29-95bc-c62462500684","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaasadaf-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaasadaf-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1bc070a-ce63-5ecc-b897-86d3f7e0e3f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaashirin-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaashirin-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4842cf86-1ac6-5695-9daf-0db562cfa0b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaatahmineh-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaatahmineh-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9849cd46-02dd-51f6-8a95-26d361a011d2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaatara-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaatara-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76964765-8e18-5600-900e-daae7f7baeef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaatt00.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaatt00.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adb63994-ab64-5599-98bb-2c38bb749c1d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaatt07.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaatt07.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eef643b6-7fdd-5dfb-978b-29abfffd69c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaatt09.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaatt09.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52a7977b-58f4-5e42-9b68-396e9db38533","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaatt10.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaatt10.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a47d4b5-0dab-5ffb-a218-1dcf7ee44e18","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaatt11.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaatt11.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73154a65-b6a2-5c6f-b8f7-e034e5281fc8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaatt12.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaatt12.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d16970e-81d1-554b-b8ae-19a641449f6d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaatt15.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaatt15.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c65bdb0-67ab-57ce-a9c5-ecf679c471ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaatt16.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaatt16.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98ab095b-335f-5e4e-8d9f-b0b930ae5bcc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaatt22.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaatt22.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62dd4c76-3a21-5c6d-8f3c-b877e80e5ad5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaatt33.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaatt33.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b1aa225-a4e4-5e16-b275-bae3827170c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaatt44.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaatt44.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--647b94d8-a9a2-52ac-a3e7-36da38bb63ff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaatt55.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaatt55.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdd486b2-3972-559c-a234-b36663990881","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaatt66.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaatt66.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a4e9d86-12ed-5409-8bba-490e231108ac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaatt77.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaatt77.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb6c8194-de2a-5e8d-995b-d0e4d61c3a0e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaatt88.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaatt88.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97f595a4-6aba-5f55-949c-70e1268e1e48","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaatt99.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaatt99.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f734e32e-6ca3-5d85-8f81-feffbc5a66b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaavida-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaavida-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a632040-f248-5502-93e2-9c08d10c1920","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaavisasconsultant.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaavisasconsultant.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--779a3179-0505-5750-9fea-a5c820b29938","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaayasna-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaayasna-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6306ecc9-388c-5276-86ec-36ac575fb43c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaazhaleh-wisemr1.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaazhaleh-wisemr1.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7162f23-4d20-532b-a842-c2f3a5b7603d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aabbccddbonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aabbccddbonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55efcb47-8b84-5ae2-b193-a48fbb6be256","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aabmoney.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aabmoney.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03a833a9-95cb-50c2-b169-a0e7ba74e9a9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aachentag.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aachentag.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4610a7d0-f879-55b5-984d-1ded61af26d3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaciti.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaciti.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40a8da52-24fa-5f19-b1f1-8086b2c5dd31","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aacsgo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aacsgo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a118f16-507b-5feb-8961-22290708ed63","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aacuweb3.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aacuweb3.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6710d2fe-fc00-5580-8086-b2fe7cd1d20f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aag-accounting.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aag-accounting.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f273a12b-5e8b-5f62-9c16-aeec278e17f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaglotto.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaglotto.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--483ae934-1147-53b3-ab95-0c3437d68b53","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaintrust-kg.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaintrust-kg.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28120c96-3d0c-56fc-9320-e5e20028bb31","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aairso.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aairso.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3657bf70-c030-54ef-b2f4-6baa567f29dc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aallianztravelinsurance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aallianztravelinsurance.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60c39a18-f0d0-596f-86c5-16225f3b07fb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aamirhossain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aamirhossain.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6ea95c7-5824-5856-bc85-25283bc74d31","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aanbouwplaatsengroningen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aanbouwplaatsengroningen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd9f0a3-17d4-5248-9aa8-b33d6dd29ccd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aanddvehiclerepairscardiff.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aanddvehiclerepairscardiff.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a20534d7-6545-516f-b252-1761e2634691","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aandhlaw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aandhlaw.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--337c08c8-4097-5b1d-b69e-b0f8be5afcbb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aangkorwattour.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aangkorwattour.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ddb8f25-3806-5d30-b0ae-ef1bc093fddb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aankoopmakelaargroningen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aankoopmakelaargroningen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e2b91e2-f761-5b23-89c1-f945e194206b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aannemergroningen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aannemergroningen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--667be492-297a-574f-9134-c075bfeb8bd9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aanvraag-update-toepassing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aanvraag-update-toepassing.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f29bce6-7ee4-5b1c-92a3-aa346e2b986d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aanzara.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aanzara.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ead777f4-9bc3-5e04-b5b3-81808b2cf112","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aanzien.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aanzien.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7096d50-dc04-53be-8db4-c4a23f3e10ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaorca.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaorca.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92c21bd4-9ae6-5779-a08b-e3733e0ba562","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aapentrusted.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aapentrusted.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14ff8eb4-f909-5f1e-bd93-148a670f1ee3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aapple.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aapple.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da5abe88-2614-5d51-97d6-e6e13132d36e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaronsattic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaronsattic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81667351-34a6-5ca5-b8ac-d9c97a7cccf1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aarontron.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aarontron.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eda7632-eef3-5011-b351-4fc8a30dc595","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aarp-medicare-advantage-plans.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aarp-medicare-advantage-plans.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1db41b4-f4b9-5180-8d74-633e535523a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aarp-medicare-advantage.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aarp-medicare-advantage.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--738c1c6e-bd3a-50dd-8129-26732efc2cff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aarp-medicare-supplement-plans.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aarp-medicare-supplement-plans.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b763d926-0771-5574-b8ad-80529bfc585f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aarp-medicare-supplement.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aarp-medicare-supplement.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--087b08a1-eb9f-5fad-8465-f256e43348fb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aarpclaim.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aarpclaim.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a852a22c-d3c5-5be5-8706-0f6824b7f980","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aarpmedicarers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aarpmedicarers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06806347-0bd7-5fb4-a766-b37423e01a69","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aarudhragroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aarudhragroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b3ee127-2555-5a6e-8bb1-5266f52530c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aasdgoggeetolls.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aasdgoggeetolls.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6732b57-d248-5a8d-bc20-52048c6262e1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aasecure.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aasecure.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5be95fc4-03f7-5a25-8add-091d5304a8b9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aastrong.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aastrong.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1463a02-9c37-53a8-baf0-6d6f074ce934","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aastsuite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aastsuite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d0a339-0527-588b-a9aa-fe12925c437c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aatt-internet.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aatt-internet.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b65ea37-3412-5ee4-8d68-875ade2e8fba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aatt.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aatt.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9214ae8-09ac-52c2-8002-0b4b39da101e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aatt07.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aatt07.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26294f92-2dd3-59c6-8d42-bd06a8df0167","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aatt07.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aatt07.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e36a73b5-be42-5b5f-a4b1-4664de737d9b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aatt11.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aatt11.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--706b2e06-cb30-5067-84d3-bde2e26b39fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aatt3.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aatt3.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc3b7804-e438-55ce-a2e2-709ecaa0a1ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aatt389.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aatt389.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f8ef3c4-9dd9-5bae-bb58-5fc4cffe36b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aatt5.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aatt5.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54fa92a6-f592-5c75-9d9e-f968d7e8b72c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aatt5583.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aatt5583.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abb7fb45-e16e-564f-954e-886d1ea490de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aatt6.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aatt6.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8dd7df7-540c-5f54-81bc-856b13c7eb72","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aatt666.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aatt666.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44d0a43d-98ed-57b6-8953-3ab99cfb2083","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aatt6681.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aatt6681.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38cacfd8-5d33-569d-ba74-8a4c4da0e87a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aatt877.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aatt877.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--819a518e-7b23-5dc9-900b-7aa1d35881ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aatt9.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aatt9.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dd29fe7-3080-5082-8075-a10ec71e513b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aatt969.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aatt969.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b3ee0d-44a0-5422-a6e7-3a5789106f21","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aatthe.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aatthe.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69557ef0-42e9-5253-96fa-e9f2224d403a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aattmn.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aattmn.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb6272c0-b1e4-5617-9fff-6b98134a36f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aattsurs.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aattsurs.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f2e2114-292e-59d5-b27b-8535fccec74a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aattt00.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aattt00.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fe14c27-9063-5b6e-ae2a-a975997aa682","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aattt11.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aattt11.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63ace600-7966-53ba-ae9d-f88b010ad4c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aattt22.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aattt22.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97c71760-4a63-5499-aaf8-06e9f7bf8709","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aattt33.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aattt33.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4561add-8e2d-51ad-9604-89e6addccc2c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aattt44.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aattt44.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15614da1-3610-529b-9e4f-c83bbd72fce5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aattt55.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aattt55.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea84ea57-ab8d-50fa-9134-3020f8d5e2fe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aattt66.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aattt66.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6b0c073-a761-5877-9bb4-cd54ad458b3a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aattt77.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aattt77.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16d524a4-19f4-55b8-a6d2-320c2f29d134","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aattt88.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aattt88.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16f79319-73d1-5443-b47e-64519cf6bd3d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aattt99.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aattt99.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b65bfe5-b0f5-50d7-aee3-881adc30076b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aattya.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aattya.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d8ba281-2b88-507f-9116-66eccf2ddb7c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aausps.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aausps.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a760d11d-b9be-5bf3-b14e-d14dc43d4b30","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aausps.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aausps.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbbcac4e-090d-5d08-8dc9-c83f5f258008","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aavattwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavattwin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72f1be6d-ebd4-5623-83dc-2f9969ec254c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aavattype.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavattype.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee33210a-1e99-5c65-8919-8a535300074a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaveconnecting.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveconnecting.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0d4a648-c836-5832-8438-4254402e951b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aavefi-web3.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavefi-web3.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79b32bc6-1c98-5297-8cf9-264548708938","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaveupdate.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveupdate.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eace758c-b652-5644-925e-07673f6a7c05","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaviatormastercard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaviatormastercard.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ea4760d-e7b6-56a3-86a4-d163928d9f0a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aaxisgroupssolution.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaxisgroupssolution.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84196f65-8e5d-59fa-bf0d-27527bb0ddaa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aayataabonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aayataabonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c48af07b-c7dd-5f55-98e1-c632d8eff8c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ab1n.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ab1n.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b89560ca-190a-5e0d-a8e1-8822d97b5202","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ab7support.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ab7support.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13d1c7f9-f83f-593b-915b-0cf90680e2cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abacusaccountingandtaxessolutions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abacusaccountingandtaxessolutions.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5920c35-2048-52a6-8d74-c65575e15d58","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abadminton.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abadminton.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--790098d4-f9e1-5985-bd00-457ae264079e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abalucksuit.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abalucksuit.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f7b9e33-ea21-5cf1-b8aa-826be16f7b84","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abandonable.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abandonable.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cee31bdc-5260-5f3c-b399-b738e2b64bc8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abantiktok.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abantiktok.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ce98e83-b1c0-50b0-bb26-8c699e8aa5b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abaoktigztfirst.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abaoktigztfirst.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0888882-8299-5a05-86a7-7ead39ed167c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abaonyminty.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abaonyminty.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53680d83-c0d5-59b6-acf1-4d345cf2a9cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abaseeninstitute.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abaseeninstitute.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5001f0d5-a83b-5c5f-af42-c58ef1aeb7f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abaseenmotor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abaseenmotor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fac8bcf1-9c62-5962-a0c9-5e8a2450a819","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abaseinfo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abaseinfo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce0d8f33-95e8-5dc0-b403-a187e20b1f68","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abasemail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abasemail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4b636fd-9f2d-5077-8751-3b576ace951e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abasverify.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abasverify.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a535ad-5ccd-5086-8ca4-2ccefd99be18","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abatan71bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abatan71bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec49e9cb-0ffb-5810-af08-049c81e26b3d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abattagearbremontreal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abattagearbremontreal.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca9f6024-56e1-5e34-88b7-00bee4271d9a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abattagearbrequebec.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abattagearbrequebec.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--005a5473-ed35-5bd1-bc78-92c1fd67ef97","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abattants.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abattants.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--552d590d-f23c-5ab7-ae28-2db2e609a321","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abattoircrets.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abattoircrets.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87d69a2d-0f1e-5c4d-a30b-dc3aac318987","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abbaseballgear.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abbaseballgear.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3a255c5-3374-59c2-876b-482b27faf6b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abbaselchavo46milyon.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abbaselchavo46milyon.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--345566e8-cf3e-53fa-b4d2-f9eb139d9c64","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abbassalimi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abbassalimi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49ee7fec-18c7-5191-95a8-eca760588461","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abbatoken.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abbatoken.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cc9fbe2-44ed-5f3b-806e-f7659a6d1200","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abbatron.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abbatron.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a501a159-95a9-5073-9c26-bb7999cbcf1f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abbeyfarmholidayhomes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abbeyfarmholidayhomes.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58b18b4c-265f-517b-9dc1-7ca3896e0bd3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abbiereslis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abbiereslis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--747c625b-86b2-5b75-96c7-230f2bce14f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abbiwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abbiwallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc49fbf4-fcac-5a89-8433-213a5146ab26","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abbyshairsalon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abbyshairsalon.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e041ca09-8d61-5f7b-b689-b33488126466","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abcbitcoins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abcbitcoins.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99fb3fb6-6b80-5754-a63c-a8f090901dcb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abcbridgeclub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abcbridgeclub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0564d1b2-30b1-5973-950f-bc0fa1b18232","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abccrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abccrypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ca52bb0-a50a-54a5-ba92-0c1430ea72e6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abcdccaatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abcdccaatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0979afe-b3ed-539f-a0c1-f0b51b2369c4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abcde56231.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abcde56231.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bddda67f-a461-5e88-a996-b084b0961635","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abcdefjdating.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abcdefjdating.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae31ae3d-9c03-555f-b5c6-70cc13f948f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abcfarmaa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abcfarmaa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba7efcb5-0c11-5cd6-a62c-449c45ff15ae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abcfinanzas-servicios.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abcfinanzas-servicios.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--365fe081-8ce3-56af-bc45-1c41b17beab0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abcforex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abcforex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0174399-c7a0-5cb5-be1e-79e01ad5ecec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abcgamex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abcgamex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb2426de-53da-50c3-9d81-3332c65d9a03","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abchealthconnectionhr.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abchealthconnectionhr.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1674497c-068c-5f3c-8dff-9807f5cf298e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abckrakensocials.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abckrakensocials.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59482add-abac-59dd-989c-8d0e57e904c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abcryptocurrency.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abcryptocurrency.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--159ec73b-4c52-51dc-9ae0-4baa4487eb72","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abctechnicalsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abctechnicalsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0b7c063-5eb6-551c-aa4f-ca81cff3059c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abctrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abctrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c33c85d-9f21-5087-816b-8da11bfa3c0e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abd8lkerimbonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abd8lkerimbonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--744b5ebd-4fd7-5e83-833c-7cec28c783f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abd8lkerimbonanza1.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abd8lkerimbonanza1.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2207fdf2-a6ed-579a-8ef3-43ebf93a8c6a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abdakman0gmailplay.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abdakman0gmailplay.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3be959d9-9f35-51aa-b671-95abd9e3665c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abdinorhirsi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abdinorhirsi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66356606-48e6-522f-8b00-b983be3c70d3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abdissaco.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abdissaco.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a5fd8c2-e893-5dc7-9fd3-b46dab1c843d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abdsecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abdsecure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--234357cf-4077-53d8-8051-a02c0107866c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abdulber1212bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abdulber1212bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23584255-d6b7-5a23-a562-d6d709c4e533","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abdulhussain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abdulhussain.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e99aa52-d9b4-56d4-b984-b7a542e6c96d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abdulkadirsaidcio.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abdulkadirsaidcio.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56bd74a6-1d6d-5098-b661-1f118710ec95","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abdullah4774bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abdullah4774bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdaa397d-b84c-541c-b4ff-dc1d20e764e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abdullah8181bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abdullah8181bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6d1c96d-067d-5bf1-8976-913843c7cd7b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abdullahbhatti.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abdullahbhatti.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6f276b0-0ce3-5630-8a23-2cde64c19568","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abdullahiidriss2024gmail.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abdullahiidriss2024gmail.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cd155ca-fb6a-5f66-999b-d6906bca0946","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abdussamad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abdussamad.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc119c8a-63ad-51f4-be14-54aea1be7313","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abeatbusinessandsmartideas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abeatbusinessandsmartideas.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0690409f-81a3-5647-87f5-d50b2525ba13","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abeautybuffet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abeautybuffet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32195241-e6cd-537a-8463-f0178623f4f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abeconnect.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abeconnect.top']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bb2e200-b852-5598-8ed2-fd4f9882954a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abeltreefarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abeltreefarm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8473cf0-bc27-5013-b978-2dd4d6443d16","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abenefitshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abenefitshop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb6f607-81e5-507f-8aee-5468ce894657","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abeofficesecurefile.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abeofficesecurefile.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1c0df26-0a75-517f-b12b-0e6442d54892","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abeofficesecurefilecdoc.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abeofficesecurefilecdoc.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5a21ff2-3fa0-5e03-a4fe-8e324415187d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abeofficesecurefilexx.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abeofficesecurefilexx.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f258dcb0-79b1-5d7d-89aa-0448cbe1bf35","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abfarm.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abfarm.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff3dd7a9-a679-5122-8a96-1597d3ffddd8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abglobalscreeningmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abglobalscreeningmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6f6e524-ff8f-5a52-a600-a8e4df4cabb1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abhiatt.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhiatt.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c763fb98-d28d-559a-bc04-8e1a90baafe0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abhikchattopadhyay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhikchattopadhyay.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dacc505f-a6fa-5fea-b3f6-559c00f61cb1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abhsuiejmoqa.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhsuiejmoqa.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4b1c65e-b73d-510d-927b-ba0773d9e800","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abiafirstteacherlms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abiafirstteacherlms.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--705a74d2-bae7-5390-a62d-5686ea361015","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abianzhi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abianzhi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8d0b512-5240-5ffa-b3d9-35fd4b59623e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abiaweb3conference.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abiaweb3conference.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba58fc4b-7d13-5af5-be26-89dd22b4815b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abiconnectdigital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abiconnectdigital.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa3dee24-1901-53ee-82e4-1c5ffb59c500","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abigail-ghametnabashe.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abigail-ghametnabashe.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07c5e7d5-2c6d-541e-bcf1-ad3c7fd777ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abigail-rally.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abigail-rally.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbff7422-9470-5f00-89ff-0a00f9023f16","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abigailbeaglepupshome.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abigailbeaglepupshome.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b8e4ca8-358e-5000-8a5f-8cbcc7da8cfc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abigailkirscch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abigailkirscch.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30f2bd2c-384a-58c6-86f4-eff7c2cd388a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abigaillkirsch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abigaillkirsch.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f55fbfd-f825-5d00-9d56-51e223e8028e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abigailmkperedemhassan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abigailmkperedemhassan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3091be67-b59b-5022-87ad-e02b101276c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abigailsvintageattic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abigailsvintageattic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15dd62be-ccf5-5135-adf4-cbdb6f5aa558","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abigmailbox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abigmailbox.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad0484d0-b5ba-5222-93de-60ffccfe563d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abilitron.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abilitron.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--676cbf40-3c27-5384-85c8-e3c1d22125d2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abilityconnectonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abilityconnectonline.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29eeb1fc-58a0-519b-abdf-19c0e11ab6c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abirseedsenterprises.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abirseedsenterprises.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adf82257-8721-5921-bb00-b765fe9a560c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abitcoincorp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abitcoincorp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af2b1d9b-d5e8-5703-a145-7bd952aa1033","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abitingdiscord.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abitingdiscord.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68969c4c-da94-532d-bcbc-34af54f7011f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abjectionremarksdisarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abjectionremarksdisarm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b11a29ee-f82d-5065-aa16-6a3f21c5f98a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abkbattery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abkbattery.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4304e0a0-a8ce-56cf-8d90-3387e18719a3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ableaccount411.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ableaccount411.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4318cf0-621c-5d7c-b75c-7688bf094516","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ablebay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ablebay.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59ed0905-5440-538b-9225-230882cb006f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abletreefarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abletreefarm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c83f672-9724-5ebb-99ab-7d71608a2b10","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ableupdate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ableupdate.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5936af9e-14ac-53f9-8382-619dcaaf8e88","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ablomintyuz.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ablomintyuz.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5a0fbd9-3287-517f-92fb-556c8eefa1e6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abmentally.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abmentally.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e62adb67-5aad-5161-92ee-1cbb7b61d299","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abmmosharrafhossain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abmmosharrafhossain.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e148cce4-47c5-5a70-b93e-389f1c7ea11d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abmode.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abmode.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b47e7919-7ed6-5e4b-baf2-40de133c3d41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abmoe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abmoe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad814255-0c1e-5cc9-811d-1f1d69806468","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abmoo.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abmoo.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c38c29ba-b4ea-5c69-bdb3-84c0eab109ad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abmoria.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abmoria.biz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fcc5c3a-d450-5682-8d0a-562d541da614","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abnehmenmitschlafinftr.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abnehmenmitschlafinftr.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45fbf057-8d43-597a-bee0-61f94ea72ede","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abnehmenmitschlafinftw.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abnehmenmitschlafinftw.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20f84450-a70f-559a-af40-af5eb2e648f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aboalhassancarpet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aboalhassancarpet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--364b195d-88fb-588c-bcd4-fc13a2a874f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abodetipssupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abodetipssupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fee26296-84c5-51e2-b6dc-9657ef777830","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abogadocannabico.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abogadocannabico.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f4118e-e229-518c-81eb-9f5bc96359ff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abogadosbarramexicana.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abogadosbarramexicana.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fa46137-4309-55c7-be65-8ad0e75b58da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abogadosenseattle.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abogadosenseattle.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2c95e82-2492-58c6-aa6f-97a2575865de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abogadosonlineargentina.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abogadosonlineargentina.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a9860d9-185a-5bdb-a506-c76538d79582","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abogadossantiago.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abogadossantiago.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c72947d-4979-58db-a641-80b9c3980057","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abogadosterrassa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abogadosterrassa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fe17815-0107-5d1e-9945-9653c5280c29","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abogadoterrassa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abogadoterrassa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d89414a-a7aa-51e8-929d-978259522142","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aboissa-com.bar","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aboissa-com.bar']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--280e487a-342c-5370-b2c3-d8c7823df7cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abolishislandstrust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abolishislandstrust.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77c0d0e9-a804-551a-9b46-f09bccccac35","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abondus-farms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abondus-farms.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebd254e0-b57a-5326-9cb4-2380c37c79ae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abonnementnetflix.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abonnementnetflix.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf72d24a-b9ea-516f-aa47-606db087e772","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abonnementssektion-connect-dk.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abonnementssektion-connect-dk.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d908498-7e1d-58e4-809d-d38f55aff46c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aboudssa.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aboudssa.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb8561f3-7dad-560d-83f2-e44ba66c23dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aboughallymotors.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aboughallymotors.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46bb5116-dcad-5167-86ce-33eabf7f5916","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abouhassan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abouhassan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e261e2f-551b-56fb-b9f9-2d6797f9b6b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aboussalama.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aboussalama.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fb56b2a-f265-5537-91e6-9e25af71f326","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: about-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-apple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04c89a7a-68b1-5f53-a5b4-c61c6689fc3e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: about-your-account.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-your-account.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aee687c-e04a-5112-aa01-13599ba2d846","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aboutdirectmarketing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aboutdirectmarketing.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8b489ad-cd89-5712-a504-d691d6500540","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aboutfattyliver.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aboutfattyliver.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--268c5394-4df5-5e1b-96ad-41357427e6ed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aboutgoogle.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aboutgoogle.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24581517-a96e-53b8-ab65-629715fc5db3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aboutkrakensocials.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aboutkrakensocials.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51a12a76-eee9-59dd-9994-961232624fad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aboutpowerofattorney.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aboutpowerofattorney.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9bbf3a0-1dfe-5065-8986-1e2c457830cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aboutrallyhealth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aboutrallyhealth.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfb0d0f6-e3f4-5a06-bfe3-dc0ff0d4400f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aboutsecure.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aboutsecure.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18b0e90f-32cc-5da7-9f60-4d4ea59c11c4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abouturtrustfinn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abouturtrustfinn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--093e1421-6450-557b-9a63-35a8df8af32e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aboutyouraccount.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aboutyouraccount.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9ec4a09-98f3-5a79-b357-99a9d9b21ada","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abouvelintr.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abouvelintr.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c21102c-4106-5327-8937-e0e4c6ff27bb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aboveallroofingandrepairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aboveallroofingandrepairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--711b38fc-95a6-5be8-8cfe-2708567ce4aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abqinjuryattorneys.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abqinjuryattorneys.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a02859f-a198-56bd-9e82-90d135b007ff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abracadabramint.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abracadabramint.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2e9d0cd-c61d-5ee2-ac01-7d02d67eaf03","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abrahamsgrossattorney.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abrahamsgrossattorney.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a086597-a40f-5f43-869f-d8b7d5ecb33d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abrakadatabase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abrakadatabase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e070abdb-03d7-578a-94f1-1f0828240007","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abranz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abranz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3d3ef97-e776-516f-b7f9-26b518c364e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abredargentfort.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abredargentfort.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3bc5439-7bb0-5f69-97d0-20b23574e83e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abridgetowisdom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abridgetowisdom.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb0a82af-d7ea-5c4e-95e5-47a1b1b3e8d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abripper.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abripper.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5076faf-ba1d-5584-a3ff-83dc1fd8bcee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abruptlyinstitution.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abruptlyinstitution.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b60e3efe-8cf5-5858-890f-92b678a3bc1e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abruptnesscarrier.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abruptnesscarrier.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a62ae82-4447-5ddd-a6e1-d454a387078a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: absaccountech.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absaccountech.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8363da6-fd9f-57cd-88d2-c724846b5863","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abscissae.website","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abscissae.website']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5cba6fc-b26e-5b6e-b73b-357244a07d31","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: absclaim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absclaim.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db123eeb-8e7c-5f04-b003-32df8d48e4e6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: absd-secure.cam","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absd-secure.cam']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47bb1659-4e50-5b03-8948-a0f381e69c26","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: absd-secured.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absd-secured.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07946017-fb70-510d-a71a-941c0e09a7c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: absecurely.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absecurely.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b34498f-0ecd-5f7b-b529-1429dbffcd2b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: absoloot2209bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absoloot2209bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33200f7e-55dd-510b-9251-06c068e5ae30","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: absolutebestairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absolutebestairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b07f620-7b9c-5f23-9f2b-13ce98f454e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: absolutebestbuys.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absolutebestbuys.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c79db367-10d7-5442-8168-e7d68adf80c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: absolutebitcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absolutebitcoin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d8f687b-9c51-5228-947c-d65ffcf4c7b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: absolutebritishshorthairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absolutebritishshorthairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1abf38e0-86fe-577f-934d-9f3b218638d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: absoluteessays.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absoluteessays.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8050c1b9-dafe-5731-b5ef-8b6fb6092a23","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: absolutevaults.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absolutevaults.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d44a511-7d67-5dd0-8888-a3c4b8ac81d0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: absolutewellnessa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absolutewellnessa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--854110bf-d153-5662-b0f6-65e0a973eeea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: absonlineacont.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absonlineacont.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e68d5b9c-85d1-5d12-a78d-4a85506bae01","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: absorbcertifiedelectrician.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absorbcertifiedelectrician.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02e6a7d9-d941-514c-b2e4-5ce8ee75201b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: absorbedexistence.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absorbedexistence.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8247c4f2-72b0-5087-8353-db1a7e81520b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abstronicsperu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstronicsperu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--206f0727-9477-5a8d-9edf-2110b4e6e699","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: absupport.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absupport.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3dc36fb-0c53-59c4-ab67-805a3a074773","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: absverify.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absverify.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4de2ee6-d692-5de2-aea8-8763b0f52e21","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abszentimint.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abszentimint.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79a73620-a219-55ab-b310-c36f7c6787a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abtconnection.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abtconnection.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--932057d1-646b-5330-af42-95e8a8c618a5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abtokens.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abtokens.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5506f07-3ca5-562c-aa5c-415b7c1704b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abtronautomation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abtronautomation.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5944ad9-7971-56c4-a368-7eaa822d04c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abudhabibitcoin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abudhabibitcoin.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7750d557-712f-5c3c-9043-a035c263831e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abudhabisatta1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abudhabisatta1.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--426d47df-e18d-52b1-a07b-0c13baec85b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abuisfishssa.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abuisfishssa.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d84c2a0a-ef17-5a54-961f-b569e0c3d782","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abuja-first.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abuja-first.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cf8800a-ac2c-5f79-9303-298e9d4f8fac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abuja-firstzilo.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abuja-firstzilo.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bc04e7d-33a2-5097-b7bd-a3927ce8e2c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abuja-monadian.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abuja-monadian.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--870836fb-06bf-5e66-849a-ea8061501c46","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abuja-trust.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abuja-trust.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83e9af53-eb44-5929-ab97-7619409c0276","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abulbassar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abulbassar.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--144dbbcc-9018-5c0d-8cd1-3ef72e3e5630","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abulhassan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abulhassan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12baa46f-75ff-51a3-8a42-1294fad6f102","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abundancecryptotrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abundancecryptotrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73ffd489-c7e8-5f40-81b7-6fb7722130ef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abundanceinabox.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abundanceinabox.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6adf4320-d27c-53b1-9aa9-7de5d8ec9879","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abundanceinabox.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abundanceinabox.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c99056f-5057-5153-b421-0d17caff316b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abundanceledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abundanceledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef1d616e-61cf-5648-ae51-d21f390a7e42","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abunone.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abunone.top']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7afc5b0a-5917-5c5c-ba3b-ced3bca451d3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abuse-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abuse-icloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--147d075e-c19e-52b7-9a71-8415d49c8da1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abusinessai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abusinessai.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bd92ee1-22f4-5eb8-a5b7-fcc1d72a30a3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abusupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abusupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b971f83-6f18-5fd7-becb-59b8428504ea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abuustanzaniatours.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abuustanzaniatours.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a9afbfc-5ca1-5863-a509-98a0ec3af1df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abvantrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abvantrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d589247c-d47a-5174-b46f-dd2c51e5e403","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abxsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abxsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--796f81d2-641d-57df-a58e-abdf6c93f031","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abys-secured.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abys-secured.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--076b3d9e-3ca4-5df7-a555-ecad841bbb17","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abyssads.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abyssads.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92d2502e-fc75-5d7c-a349-ecaa5764246e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abyssads.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abyssads.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1651df6-c58f-592a-a0b0-ddca888e5285","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abyssalarts.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abyssalarts.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb368422-e4ea-5685-888d-086581759daa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abyssalascent.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abyssalascent.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af2c75a9-a386-5030-8949-c6735d49fbb4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abyssalascent.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abyssalascent.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--521c4be8-eba1-5927-8f58-cf17507ed9f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abyssalascenta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abyssalascenta.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8cdec2e-ebfb-5c98-a159-f15b78167d42","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abyssalascenta.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abyssalascenta.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae1a7fd4-5481-5050-b35d-ce3c977cd1b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abyssalforge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abyssalforge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0372f52d-9a21-5ebb-8eaa-d42c558df48d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abyssalres.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abyssalres.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ff1eec7-221e-5399-a8c4-5c2038ce4d64","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abyssarcadearmorascentavalanche.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abyssarcadearmorascentavalanche.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0bf34ef-a675-576e-b88d-ba9686cc7b4a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abyssarcadearmorascentavalanche.homes","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abyssarcadearmorascentavalanche.homes']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2abb6595-4111-5478-8d73-c15a83536b7d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abyssiniancattery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abyssiniancattery.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5adfee95-eb98-58b3-ac18-a7cfb5391eac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: abzsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abzsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--086ea525-f86a-5d55-98f0-9b1c3e4a94c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ac-autos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ac-autos.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c702926f-27ee-5902-8797-7b95b068693e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ac-repairs-near-me.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ac-repairs-near-me.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e028505a-2681-55e6-bbaa-2846533774d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ac-repairs-near-me.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ac-repairs-near-me.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1bdff42-a643-5450-8e6c-58d41fb3ece5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ac-repairs.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ac-repairs.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f77330b9-91ef-526b-93c0-e6dec9d26350","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ac1n.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ac1n.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a3dbb61-42bc-522c-88ed-a321972fd75d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acaconnectingus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acaconnectingus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfdf9386-8762-5b15-9eac-9fd77d1b9208","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: academia-alianzalima.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'academia-alianzalima.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44be7c2c-cdc9-579f-941d-fb8f225bd7d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: academiadefinanzasestudiantiles.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'academiadefinanzasestudiantiles.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bcdbdba-80db-5944-9745-26801a95df0a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: academiagrupseld.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'academiagrupseld.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ccd8d20-6f94-5f03-93e6-2a77961d8909","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: academiamattices.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'academiamattices.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e1720c6-bbc5-517e-9afb-6d5d793c3f65","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: academiamexicanadenutriciongeriatrica.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'academiamexicanadenutriciongeriatrica.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da619547-a5a8-50e1-9b13-7b216a36d9e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: academicbridgeint.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'academicbridgeint.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--623fa7f3-2907-5a7b-bf64-4378630a25d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: academicbridges.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'academicbridges.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f618531-2e10-5ab6-b753-f2c564ea1d37","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: academmy-educattions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'academmy-educattions.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28845b68-8f12-5ed1-8b89-ac5a9656f286","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: academyconnect.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'academyconnect.digital']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53d04f25-cc30-591d-8ec7-c529fd56ffe8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: academyconnections.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'academyconnections.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f12e2fc-4f6f-521f-9593-c1c2620953ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: academymint.best","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'academymint.best']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f5421ee-fe30-5d58-8be2-b1d43003f2a9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: academywallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'academywallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--272078bc-ff58-587f-9828-6a73beaff845","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: academyweb3.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'academyweb3.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3916cf5f-7090-5adf-a1b8-0aeeb436ce39","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acaptrust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acaptrust.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--962fe340-1b8a-584d-aa5b-5a2dd81a5e9c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acarmetinbonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acarmetinbonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ca497b0-fef9-5e53-b935-c151afeddf3a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acbconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acbconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3478204-944e-5e30-995c-a76cf6ab910e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acc-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-icloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c87ea006-6444-5525-8a08-eb2079797b3b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acc-nwfcverify.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-nwfcverify.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffb627c5-8fd6-5cbd-b55f-8ebc035e5b2f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acc-ountverify-secrbc.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-ountverify-secrbc.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb07fc80-d711-5a39-b632-1d04b3aae009","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acc-selco-verify.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-selco-verify.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce65b3b-62d8-5a3a-a61c-aa5c8ea88757","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acc-usaa0-verify.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-usaa0-verify.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0d99b01-8260-5fb0-9e5e-85f3e5444b86","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acc-usaa1-verify.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-usaa1-verify.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b68c12a-ff8e-5123-8313-afa4652c64e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acc-verify-payment.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-verify-payment.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1bafc6b-6bc9-5d06-80f3-0130df0d385c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acc-wrlght0patt.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-wrlght0patt.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee119a9b-35a4-5a04-b538-8dd25b164361","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acc004-authverify.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc004-authverify.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb759fb9-2a10-59c2-919a-24adfd095be4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acc0secure.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc0secure.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8e1fdd1-1fe0-5439-a762-3bf5f2fed4ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accbanking-royalbank3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accbanking-royalbank3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--188a3245-3ad2-5c88-a988-18fded89bbec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acccgroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acccgroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9b193cc-ca4c-5a4a-bf70-a0068a46215d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accedeenlineatuprom.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accedeenlineatuprom.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ed5155b-0713-512d-8b3b-9ead4dce26d0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accedenlineatuprom.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accedenlineatuprom.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--134e10fe-e13c-5bbc-a051-92db2df78397","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accelairsystem.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accelairsystem.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cd5748b-8849-5498-b651-4335518c2ffd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acceleratebridgehub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acceleratebridgehub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d67685f7-5bf6-58e7-aa1d-44a78edd315d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acceleratebridgepro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acceleratebridgepro.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a99aad-cff8-5bfa-ac6b-4c66e8f332c6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accelsairsystems.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accelsairsystems.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31187fb1-91b2-54d0-ba61-e3fe0614ae4f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accenttattoo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accenttattoo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb74ff28-e416-581f-9395-69ffb3016da3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accept-bitcoin-payments.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accept-bitcoin-payments.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a2afb8d-4756-53f7-a431-1154f56457f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accept-interac.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accept-interac.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45caea96-a006-5a5c-a8e2-ae542164f000","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acceptanceprocessatcrisprtherapeutics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acceptanceprocessatcrisprtherapeutics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9c385f2-d612-5bf5-9222-9f1f4bb25b79","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acceptbitcoincash.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acceptbitcoincash.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0054cfe-ede2-569d-8f8f-8c3c8b6892e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acceptcryptonearme.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acceptcryptonearme.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcdf5db0-d660-5a35-9ea9-f0cf0ee7f7f4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acces-desjardinsecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acces-desjardinsecure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d37ac2d-ef50-5dab-8b91-f16a4c5b3ba6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acces-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acces-ledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--064a1605-f10c-5afd-812f-e4211a5d9ca8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acces-verify.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acces-verify.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--932576a7-8dc4-519e-95f1-59bd5ece5e08","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesd-secure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesd-secure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e237399-fb87-58ef-8a49-3c8877811160","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesd-secure.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesd-secure.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8d98f5c-48fe-5caa-b8f4-de26c82e96de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesd-support.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesd-support.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--168ea373-6de4-5045-a5ed-fb0b80cfb231","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesd-verify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesd-verify.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4240ede-096e-5836-89cf-4a8af69be107","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesdverify.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesdverify.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b65940a-9b17-5c42-8e4d-f1e7d6782f49","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesiumsuite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesiumsuite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b185bf23-8cd0-5dd6-bfcc-f5ee413beb03","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acceso-netflix.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acceso-netflix.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--088eddd6-5c60-564d-b882-83fd5a3f1720","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesoenlinea.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesoenlinea.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf5d9d7-22e4-56fa-8e43-1419d731202b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesoenlineaclientes.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesoenlineaclientes.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19346c18-2833-54b0-bf16-9a3900703fea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: access-account.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-account.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cdb1d0b-68c3-50b9-8eef-a786bc3840b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: access-amazon.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-amazon.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bea6d4d8-7f1c-5afe-8501-1c4029b724dc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: access-bnbtestoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-bnbtestoken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05a0c165-914b-5337-aa99-360486c687bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: access-connector.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-connector.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2349ca0b-457b-5f29-a908-96f687537065","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: access-hyperliquid.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-hyperliquid.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--141bdfac-b22d-5649-91df-869a8d0d772a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: access-myredapplecommunityb.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-myredapplecommunityb.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8518f45c-d1ff-5fb8-9710-95c3c9f22a77","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: access-plyredapplecommunity.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-plyredapplecommunity.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af116fcb-87e7-5a86-a10d-8a95d457d8c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: access-rogersinfinity5gservice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-rogersinfinity5gservice.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31301d7e-0e58-59fb-8163-288d255a8dbd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: access-secure.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-secure.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55e50bfe-e754-5604-a671-c3bf01309a3f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: access-signonaccountsscandc.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-signonaccountsscandc.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3c7a0e7-c880-5e68-b026-e415d4f86713","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: access-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-trezor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--976128c6-1c6b-5cb7-8018-f68cf8f152ef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: access-ups.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ups.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--832c86db-8372-562f-bb0a-ccbe9c15071e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: access2-chaseauth.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access2-chaseauth.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff28300-a176-52f2-aeef-a61b3041fa07","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessa.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessa.ink']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b7e81dc-e38d-58c1-a085-6be197514ff8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessabilitybuilders.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessabilitybuilders.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d17f7330-245b-58ca-a980-00e38fae20db","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessablle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessablle.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e3a8a98-cc0a-5571-943e-8fbc19cfd0da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessadarac.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessadarac.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1959d91-1199-5f94-b67f-f2e1bc175eca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessadomatiq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessadomatiq.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8e16e84-1e17-5c52-a6cb-4155db2272cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessadsassinagency.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessadsassinagency.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--129051f9-3c07-5595-a345-f69bdc0554f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessai.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9bb9ad3-f733-513d-9bbd-df6745d91d7f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessaiconsultancy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessaiconsultancy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd802a1-9076-5d94-a27a-e79ccf71102a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessallsavers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessallsavers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57d29520-3cc3-5551-b812-6b088a4c6c5c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessam.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55eb2023-dc6c-54bf-8429-dd2447657761","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessam.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessam.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae1ca5ad-4f00-5771-a745-27717c97bdf7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessamazingads.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessamazingads.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90676623-4452-57f8-82e5-ce2be92f2d8e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessandbuyhomes.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessandbuyhomes.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd7b58e9-8ccc-5b8f-9cb5-31633358be6e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessandbuyhouses.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessandbuyhouses.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b5964b8-6d6c-5464-b9e5-accf51c41992","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessanywherehere.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessanywherehere.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d29046-e234-5c83-9953-fa0e383452dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessanywherenowapp.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessanywherenowapp.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9983d163-bd9e-53a7-80b6-cc5070a49e3f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessanywherenowtoday.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessanywherenowtoday.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9133467e-6012-56ac-a03d-138153129cef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessanywheretoday.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessanywheretoday.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77d6be54-ec41-570a-a523-938410b7b759","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessapplicant.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessapplicant.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a15ef258-55d0-5303-b200-672e809e9be1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessapplicant.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessapplicant.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6053e789-3154-5ee0-bb7e-2207155a3e44","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessaspirationmarketing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessaspirationmarketing.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17bd6c79-6389-547e-af61-f42a20292246","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessattorney.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessattorney.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e69808e9-74aa-5f96-b77f-162d7b9190f4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauauth.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauauth.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03335593-c249-5363-8b10-ee2047e6492d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauclaim.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauclaim.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fa675f2-40f6-59c9-a3cc-5fedbcca93d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctiona.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctiona.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4783b1e-1ac3-58ec-a36d-2223a24a557d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionaa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionaa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cabd44c8-2778-5d0a-9046-03d5801ad670","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionab.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fba5fd1-4cf7-5a52-adb3-e0d240ac784f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionac.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionac.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--466066c0-e81b-5156-92f0-fe2e6952d433","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionad.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85f6c982-b837-596b-826e-d306f15fa415","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionae.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionae.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adfc13ed-44ff-5931-bb30-9172cc938916","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionaf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionaf.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc9f7c85-b7e8-503d-a6c0-43bccdb15b78","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionag.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionag.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a3f74e7-babd-536f-898a-096396105bab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionah.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionah.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdef9b84-d1a9-5b71-850a-c14c66855a92","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionai.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f672a272-5709-5ddd-ba81-040323e7e689","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionaj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionaj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55e7c8af-f54a-5f29-81da-19ba8decff2a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionak.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionak.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31c1f910-9e79-5274-b3e0-e8a64ae3ea71","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctional.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctional.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8edc9614-9480-51ab-88fd-f8c021e7aaf2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionam.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52bb1f7f-a735-5001-aa02-af0c26c79f9f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--914fec87-5107-5986-98d7-1477c399f095","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionao.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionao.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebc00bea-ccb3-51c5-8240-82358cc485ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionap.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d6a493-fd81-5ea6-b15c-1d5626bfd418","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionaq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionaq.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8d47944-64be-55f4-82e7-55a1acac237b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionar.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec430a53-289d-58af-8ea2-f18bda7c61de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionas.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1625f9e-9cc8-5fe1-82e6-0eb388f0846e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionat.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73d2120c-0a2d-53de-b552-d0c1d3d80cd5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionau.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionau.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--119f6e35-6709-57a7-ab60-a8aa7a7ab162","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionav.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionav.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88af0e57-287c-5a95-9fa7-0deb1db72f7d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionaw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionaw.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8968b92-9e70-5ff7-a001-95c29cf98aae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionax.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11e051a4-bee0-520d-a795-f3ef20d4984e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionay.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a0fee91-08aa-53d2-a6f4-3c54027a92ac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96b5df81-0316-58d9-b26f-edec63643d80","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6c4aac6-be4e-58c9-85d7-859dec894ae7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctioncenter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctioncenter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cb1264e-4b97-5ff1-9783-a4b042321c51","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctiond.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctiond.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de0a3a47-e5bc-5f8d-b170-bb7a6d939c1f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctiondirect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctiondirect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d630afad-871f-5f2d-9d46-34794b796163","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctione.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctione.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c58d1343-f4f7-5325-9de8-ae0520b2589d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionf.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b219d4c9-dc1f-53a5-8503-7f38651b4a63","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctiong.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctiong.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a50ff2a8-81b5-5336-9bec-5a4b6207c1d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctiongroup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctiongroup.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b36e592-df22-51ea-8f67-ccef851cc57d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionh.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3deecb6b-c008-5efc-819e-3355fc396565","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionhub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionhub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f068ecf-1f1a-512f-9e24-8f65505fe312","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctioni.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctioni.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a46d693-4e48-519c-b398-8f1dc255578f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a621927-7739-5262-827f-cf06978f9a76","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ba53fd4-46ff-535a-bab7-5f47daa378ff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d833185c-a420-5af6-8716-4377038afe93","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca3288e2-2ff5-584c-ba5a-dcb5ec154e66","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0daacc76-8ecb-503a-8b95-1a1dff49fdcd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionnetwork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionnetwork.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03767597-c0d1-5d4d-8574-8879e4f4d502","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionnow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionnow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30ed723b-b307-5a20-a6b6-26e9347bc019","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctiono.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctiono.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f6a7366-7cbd-51d2-bad2-7242081ae0aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctiononline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctiononline.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a80646d-a27c-59c2-ab9e-0e99d0174486","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c4b9b10-7575-5812-a9ec-e93e54c97299","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionplus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionplus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a31b6ecd-ff8a-555d-a494-66d570a4ba3d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionpro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionpro.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b99546a-bcc3-573f-8e6d-fa78b8ab59b7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionq.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--543a4a3f-cdd5-558c-9f98-d7c451750ee5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ba2d3ab-ba6a-53c9-8ce4-0dfb318ab483","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07cd026-9370-53a1-a654-c74e37e8d2cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsaa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsaa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--437b4a7c-91a7-5853-afed-0bfa482461ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11822000-a409-5740-83fc-7f7c0e8c5106","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsbb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsbb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7258488e-36cd-5c91-889f-c720c490c29e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a49fad7b-251f-5760-8342-c61e5648ef7b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionscc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionscc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b111a36-25b2-5ac2-a285-302f6a9c59de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionscenter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionscenter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--882f2837-a291-5ed8-b693-5fdde575df01","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsd.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a313905-0a2c-50e0-8022-43511336ac88","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsdd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsdd.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9df50108-d0cd-578b-acb2-4ef50596bfc5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsdirect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsdirect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--523578df-def6-5e2d-829b-adefbc2f2bce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionse.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad4882e2-da6a-51b7-ad71-81f725ee9f28","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsee.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsee.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--205b2367-ec9b-5ac1-8d87-d80f0c8a3d40","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsf.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e02386ad-2b48-52fa-8e37-9250ca6c81c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsff.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsff.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13d02f22-c496-595a-af4f-e86a48353251","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsg.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82a42384-f03d-5374-8e4e-99a7ded11ac4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsgg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsgg.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96363442-80f0-5a20-9283-7deeef451a1d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsgroup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsgroup.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb23342a-b718-5311-9bd7-46ca128c6c84","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsh.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c42f45f3-491c-5169-87d9-1110d2802053","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionshh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionshh.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7642d0b-4236-51ba-b61d-dfa14ba4ec8e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8723980-e4d8-5ee2-bf56-b6ef927f4811","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsii.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsii.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b5e6701-c00e-5215-8354-d0c4e5c2eb0f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc8bde80-0320-5e39-8929-6867719dfc82","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsjj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsjj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--531496df-5377-5754-8d0d-31e46139a6b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c55c7b9f-1227-52db-a60f-e967a61dcf0f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionskk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionskk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa2351f3-f6ea-5e0b-8814-3fd4873c8faf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a5bb161-69d0-5e32-8dc6-992c8a33c521","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsll.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsll.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aac7bbb-5fb6-5b3b-a80a-1793b1519477","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa972643-4f1b-5a86-86c7-da2ae27781a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsmm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsmm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec1de8f2-621a-59d4-832c-4ed63b052852","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a11a219e-2bb6-5b80-936b-6fa670194bfb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsnetwork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsnetwork.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c92f658c-5e93-5524-b316-74fd9e89926f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsnn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsnn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8341b784-453a-55bb-b355-78dfa481ebd7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsnow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsnow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fdd31c8-684d-57bc-b17c-cf09177204cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionso.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionso.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d31ab398-3b93-5b97-a4d0-1bdaca6e2b68","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsonline.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9f250bf-8158-5082-8503-bb4901ff5817","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsoo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsoo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b1b17cc-567b-5a53-8c98-d0b4a4f61a8d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fb019a7-7b5e-57f9-b379-d48aaebf15b8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsplus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsplus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35c8189a-09b1-50ea-b5a7-d4c7aa4ce2f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionspp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionspp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91a3b2fc-f111-5c52-95a4-8b3f6971979e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionspro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionspro.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fab44306-2f01-5aee-aeed-51c796b1b110","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionsqq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionsqq.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71ffe77c-7d18-52a4-a1e1-83e39b7f400f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionss.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d128faed-7797-5c2f-b6ef-3177a8ba8b98","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctiont.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctiont.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--095d7a92-3e6b-5dde-ab8c-446805dbcc73","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a56b366-cb02-5647-ac5f-f296dfe2e1c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionv.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7096dff-167d-561c-9325-7d48ee20af7b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionw.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f544b2-0106-5921-bc6f-056eb5942c6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fe91af7-a71d-5267-b88d-ab34988bc38f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctiony.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctiony.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3be64ce-0ddd-53b0-a348-b259ea1e5ca4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauctionz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauctionz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--792823f1-3a30-5e78-86c3-a9071cb82819","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauth.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauth.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02834d54-84c0-5dd7-b4c5-934578f7b5d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauthenticatorkey.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauthenticatorkey.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04430522-ba42-5089-a79d-ef181f586a16","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessauthentpro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauthentpro.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b92fad69-5419-50db-ac86-3fc303fcdedd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessautohistory.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessautohistory.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f1b0690-33cc-5c6b-a5bb-647627a418d2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessbonanzadesign.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessbonanzadesign.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66740450-709b-52a7-b00e-d7ce1419fb8d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessbridge.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessbridge.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--640ea7ff-db60-599c-990a-cd77d873f409","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessbridgeafrica.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessbridgeafrica.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48c1c8e3-a7fd-5984-8e65-9e76638d8345","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessclaim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessclaim.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a40335b2-268b-5fed-bb7f-a8d24ff2bb22","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessclaimcow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessclaimcow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d724494-19a9-54ab-aec7-0d732b0c3989","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessdatabaserepair.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessdatabaserepair.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c0e2db-6de9-52e1-a37d-0d34442346f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesservices-hmrc-gov.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesservices-hmrc-gov.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--564a3332-a59c-53ef-8726-209b7e1a3cda","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessfilemessage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessfilemessage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b245b80f-1ffe-5a2f-97ad-95d2250be288","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessmint.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessmint.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d12723e1-738a-53e2-a129-af1ffa69b01b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessmygmailinvite.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessmygmailinvite.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5b860dc-a80a-577d-9ef3-fbc9e20cad3c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessmygov.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessmygov.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0a6c1b3-2cc3-500a-93e3-5cae3671939d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessmyrogersplan-bill.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessmyrogersplan-bill.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f003f368-f6b8-531c-b51d-1352b11c2167","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessneedsverify.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessneedsverify.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4f9cfcf-38f0-5213-8b70-7a4e595bc971","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesso-kucoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesso-kucoin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--817b684d-cec0-55ee-b3cf-d5f4af8a132d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessoanpointclaim.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessoanpointclaim.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--692f062c-cfef-5457-82fe-3d37f5152de4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessorieconnectorieaccessorieaccessorie.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessorieconnectorieaccessorieaccessorie.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf727c6f-14fc-52e1-bee9-b4c0ec1cd868","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessoryculturevolution.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessoryculturevolution.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d783d30-4fad-5ece-9cb7-8d6761cc95d2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessorywise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessorywise.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8accb7c-03ca-5b91-b2bc-c3ca8ed0f173","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesspointclaim.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesspointclaim.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3047ab05-99c8-5c94-b23a-c5feb95067b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesspointconnectuk.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesspointconnectuk.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76faff05-5fab-5a6d-8332-6d1287de4050","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesspotify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesspotify.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15748a48-4734-543b-b1d4-b25368663d3e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessprime-account.onl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessprime-account.onl']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35581af8-968e-5091-bf35-e0e2db2604d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessresetscotiabank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessresetscotiabank.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64a77a91-9a4e-5538-84c8-09408da35f2b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesssafetyservices.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesssafetyservices.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--040c0e5a-9998-5680-967b-02aa8ada9574","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesssafetytraining.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesssafetytraining.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff74a79c-8ebf-59b9-93ae-a8471ecdcb66","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesssaltergrowth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesssaltergrowth.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7076e3ab-d374-5325-aebb-5c0b370c1cf7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesssandmobilityinc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesssandmobilityinc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--381a0378-48ac-5ba7-b523-a8f810ad613f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesssecuredb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesssecuredb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d69e0734-3585-5740-8bba-9944275cdce5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesssecuredbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesssecuredbank.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--962da56f-fb14-5e94-9771-afa86494fd52","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesssui.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesssui.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a611fe-8195-51b0-ba32-b88fe300e233","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesssupportlogin.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesssupportlogin.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb164bab-f2d6-559b-9492-c63fcb6a62bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessswiftwise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessswiftwise.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db48f464-bd70-5eb1-8660-2a0b9c8ba28a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesstelegram.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesstelegram.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94743ce2-e915-535a-903b-5898f6ecc597","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesstoairstrips.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesstoairstrips.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79638ec5-e386-5434-85e5-014b0dbd0a2f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesstrustb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesstrustb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd0340c9-ea2c-5508-bce3-fafeebb221b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesstrustbs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesstrustbs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--069edc91-51ea-5c85-b69c-263efe7319b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesstrustcapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesstrustcapital.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28e50688-4378-527b-8966-145a4fcd1010","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesstrustfintech.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesstrustfintech.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fefe38a-5ae5-5ad4-91d3-ef4b94627f42","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesstrustfintechs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesstrustfintechs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d4c492-3aa7-5d09-a472-14cabd168884","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesstrustinterbk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesstrustinterbk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ab90b90-9d38-5554-bfd8-62ceb1297114","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesstrusts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesstrusts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eac04149-ef49-5820-adee-6694cfc55d8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesstrustservice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesstrustservice.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--553b6b33-cc3d-5e4f-b478-4dd004e1405f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessupdateappsadobe.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessupdateappsadobe.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--074e8f29-67fa-541b-9281-be436b9c47e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessvellissecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessvellissecure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e1da159-544e-5076-be6e-233debcb9315","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessverify.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessverify.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3b46210-e8e0-5777-9478-07171e1d5352","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesswiseintl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesswiseintl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--003f78ac-a7c1-5bce-b48a-39a58fcc22cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accessyourrnewsummarymygovv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessyourrnewsummarymygovv.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7c1ea92-35d8-5b20-94d9-5da36c121827","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesverifyaccount.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesverifyaccount.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84e306c2-b9b2-51dc-b7fc-74a77742bbf3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accesxsecureddoc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesxsecureddoc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43c76902-5ea8-577e-9c6d-995dc4c26525","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accetratrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accetratrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ab61dc0-0a44-5434-87a1-bd4f972fcb2d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accident-attorney-car.boats","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accident-attorney-car.boats']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c06d82f-9f79-50e5-8bcc-d846a8994be7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accident-attorney-car.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accident-attorney-car.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a1e3452-8efe-5de1-842a-b6ed8d1c75ec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accident-attorney-car.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accident-attorney-car.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03142b20-47a1-5e71-9159-f865431424eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accident-attorney-car.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accident-attorney-car.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--322bb5bf-0bb7-5ba9-a7bc-337a83d27a92","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accident-attorney-hartford.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accident-attorney-hartford.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8d07848-3e7e-5340-8e24-fc02f10f30b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accident-attorney-near-me.boats","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accident-attorney-near-me.boats']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91d86bde-c16b-57e5-9bcd-e74d38cb7b9c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accident-attorney-near-me.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accident-attorney-near-me.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a71791bb-350b-582c-bf5a-dd7019e3aea0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accident-attorney-near-me.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accident-attorney-near-me.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9c0e07d-1508-5ffb-8bae-da55f7f697b8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accident-attorney-near-me.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accident-attorney-near-me.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26ea0f4d-42a9-5fb7-b6d6-a063121aa1ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accident-attorney-near-me.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accident-attorney-near-me.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--340930ba-3203-5f90-ad9d-5b8348b0ff93","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accident-attorney.bar","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accident-attorney.bar']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d900ceb9-0227-5552-8e44-02f19c285944","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accident-attorney.boats","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accident-attorney.boats']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eeb57d12-0cc2-5dca-83de-c48fa7b52541","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accident-attorney.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accident-attorney.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1e29c22-b19d-54c4-b70c-89479d86eee9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accident-attorney.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accident-attorney.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d05ce045-edff-510c-8519-83cdb604e22c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accident-attorney.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accident-attorney.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c6e58c-8fda-532c-9c7f-1206083b5617","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accident-attorneys-near-me.boats","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accident-attorneys-near-me.boats']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb1f0696-5b9b-5bea-99b8-8bf6c30bef59","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accident-attorneys-near-me.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accident-attorneys-near-me.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04359a0f-46f8-57e6-a9d3-d0ec63031622","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accident-attorneys-near-me.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accident-attorneys-near-me.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bcd42d2-9a25-5b50-93b7-5e434f7b1619","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accident-attorneys.boats","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accident-attorneys.boats']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6beba100-abd3-5778-902f-14a982bb07aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accident-attorneys.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accident-attorneys.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef6ca3fa-6066-50cf-bfea-78e3b5c8cf67","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accident-attorneys.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accident-attorneys.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--813c7a81-4fad-5a41-84d2-dc2039c51f85","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accidentallyallison.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accidentallyallison.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9756ffc8-9a40-5ec8-bc39-e7876bf67973","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accidentattorney.vegas","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accidentattorney.vegas']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dedfeffb-96cb-5d50-935e-afa91e9f9868","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accidentattorneyfinder28.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accidentattorneyfinder28.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c081f4b-de86-5d89-9632-630174b58ac1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accidentattorneyin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accidentattorneyin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59df5b28-9fec-5f24-843a-8d081951305f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accidentattorneyplantation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accidentattorneyplantation.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--918d5bbe-927f-56cd-9073-a24870b5fa01","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accidentattorneys.vegas","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accidentattorneys.vegas']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c97b0c51-1561-54a5-b9df-fd4b9f74df02","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accidentattorneyspro3.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accidentattorneyspro3.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a21e8501-5ca4-50c7-9149-91cb819ac4c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accidentclaimlondon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accidentclaimlondon.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d2a6c58-0c9b-59c5-b41e-842c5de40f1b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accidentrepairsredruth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accidentrepairsredruth.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5537d94-cc7b-5a3a-9bf3-4c81756bcdec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accidents-attorney-near-me.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accidents-attorney-near-me.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f2379f9-3659-58c5-98e0-331ef0d209fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acclaimcares.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acclaimcares.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0d21e43-f7a8-5ddb-a08f-d9ba867ae142","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acclaimed-forum.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acclaimed-forum.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52dac71b-3639-5a1e-802a-b7cac8232beb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acclaimedartist.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acclaimedartist.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0855bf84-d50f-5a73-9b56-655045649fbc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acclaimgraphics.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acclaimgraphics.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45c28f01-b93b-5fa6-88d1-8c28913c3d80","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acclaimwindowcleaning.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acclaimwindowcleaning.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aecd876e-368d-57f8-8bad-63d4f2532e99","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acclogin0-royalsecure1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acclogin0-royalsecure1.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75d2c8cf-b7ad-5e5f-b92a-9e98572897c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accntsreceivables-linkedin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accntsreceivables-linkedin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e57f1bcb-2815-5c39-8503-1d8dff6aad1d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accompanimentcouldsurprisingly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accompanimentcouldsurprisingly.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d005dc1-c7f0-5e18-a10b-1de83968a687","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accomplishmentailmentinsane.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accomplishmentailmentinsane.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dc47100-449e-5634-8e75-2320a69f86b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accomplishsetupservices.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accomplishsetupservices.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bd76b25-9f1d-5bae-b08b-2ca1cf1bb5dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acconlinesecurehunting.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acconlinesecurehunting.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9199985f-1b96-567d-ae9c-d4bfa34fa9f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accor-groups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accor-groups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--506c3318-89d7-5c30-a5e5-f5457626d0f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accordgroups.ltd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accordgroups.ltd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c9ece3d-7809-5ab9-b2d6-c768484f27a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accordtrustplc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accordtrustplc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0e1072b-1b4b-585b-ba5e-d66ce47e9bfe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accounsupport.best","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounsupport.best']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82b1dbad-0158-55a0-a8aa-6ccbe466089b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accounsystems.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounsystems.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7853861-151c-554f-9373-1ddb06b4dc7d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-about-it.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-about-it.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aa9bb8d-7ffa-584e-aa5e-c8264de3b725","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-activation.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-activation.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--147f03c6-9780-59a8-9738-5d3efb0e5ac8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-aktivieren.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-aktivieren.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3b2070e-e948-5cd5-9762-fc7484b39307","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-aktualisieren.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-aktualisieren.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a99e2b3-3490-53ed-83b1-2bfab01bef78","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-aktualisierung.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-aktualisierung.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa7ab58a-0173-53da-98f3-beb9b02258e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-alert.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-alert.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b401ad3d-8b65-5e3c-823c-0dff6008263f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-alerts.email","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-alerts.email']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc4d9a92-a8cd-5582-9148-b3227f50af3a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-amazon.store","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-amazon.store']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ebe12e6-11f2-5a02-bb5a-795f14c73f16","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-and-routing-number-on-check.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-and-routing-number-on-check.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91c5295d-f74b-55c5-a709-cbf478f71516","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-app.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af63986f-cfc4-5669-9c58-e2c1219241a7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-app.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-app.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6ea7cd5-5025-543d-9bb0-0f950a371daf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-auth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-auth.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6925d0c3-4558-5089-994b-e12c30f6a82f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-auth.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-auth.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56ce0964-38a3-514b-8861-703ffc333d7b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-buy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-buy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8733b147-28c3-5db9-907b-a578f5302ce2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-buy.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-buy.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da5bcefc-f630-5099-b961-fc3e4fc05b3b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-code.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-code.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39f24414-e94f-5393-8ab6-b2570d663175","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-code.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-code.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a14b071-29c5-5068-8539-c7a847aa8e34","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-icloudid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-icloudid.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b6cecb4-2183-5aef-91e4-9a702a967ee4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-icloudsafe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-icloudsafe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b36cbd8-a119-56be-b6e8-e9987a3852e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-icloudsecure.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-icloudsecure.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2fec137-8082-519a-bbb6-2c6a1a8be1af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-icloudsecurelink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-icloudsecurelink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4388599d-2bc4-5d81-970c-7428637c78b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-idicloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-idicloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e6377db-30fb-58c1-b98a-12e9e81fb4a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-idsafe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-idsafe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60af0f41-b7b2-50a0-9fd0-f8a70741f887","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-idsafe.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-idsafe.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--987b6c8f-4e51-58cc-9746-1f3b4c205692","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-idsecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-idsecure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15514f3a-25e8-5a00-abc6-7a4cca9cb9db","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-mail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-mail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dac68422-8f54-5088-bd59-d1c0cb71e8d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-mail.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-mail.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05280891-79f0-5123-ad0f-9d90a017b18c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-safe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-safe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5905fa83-5291-571e-8266-a24449befb66","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-safeicloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-safeicloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edba0564-6db1-5f8a-82d3-1734b0e27042","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-safeid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-safeid.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d94e34d-a6dd-5a48-8d36-090cb91fb2a9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-safeid.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-safeid.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb5c3662-39b6-5eec-83a0-53e4eaba8094","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-safeidlink.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-safeidlink.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13f95b06-ff50-57b9-8e72-f3fb1a10c2f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-secure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-secure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33db7daa-9907-5bb8-8334-2b3f139af3f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-secure.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-secure.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bbe44f5-b3a6-5c49-8f6d-707437034b41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-secureicloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-secureicloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5818af10-bb3a-5056-91e3-2924295dda5e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-secureid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-secureid.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4312d0a1-d48d-589b-9bcc-168df8227f58","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-secureidlink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-secureidlink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4060dae8-3707-5921-a649-91210b612ca4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-secureidlink.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-secureidlink.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a4d0139-fd03-5e30-855e-8fde36139885","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-store.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-store.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bd9adaf-492b-58be-9b8d-1e3036eee568","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-apple-store.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-store.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61e9a58f-76e8-5ffb-af9d-d4f81717e954","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-approval.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-approval.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63fe497a-b72a-5d6b-882b-d722181b6683","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-athuorisation-home.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-athuorisation-home.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab1d2456-f1fe-52be-88fd-232a2b5046d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-authuser.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-authuser.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce99413-72a6-5034-be08-f5d94ceb7493","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-automation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-automation.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4881303b-88ce-50e8-8b76-a984318da757","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-autorisation-home.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-autorisation-home.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcdba091-f017-5079-97b7-a9fdc5cf8608","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-base.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-base.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3d1628c-be13-58c8-a201-95b0660c53e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-bill.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-bill.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81e1936e-e1d8-51e9-9f45-104361046de0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-bloccato-gxp.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-bloccato-gxp.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9979a3f8-5d13-51c4-ade1-f69a7778305e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-btse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-btse.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6c81a98-3b30-56bd-9456-a33e76c77f7a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-buy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-buy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ee303e0-29c2-5693-9f8b-71d173660b99","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-cbase.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-cbase.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58412da2-5148-5b16-ab54-0512acdea9be","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-center.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-center.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dce10845-5c89-5eb5-82cb-02840354d642","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-center.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-center.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d3b2de2-fe7b-520a-af95-dd8225f72a2c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-checkpoint.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-checkpoint.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e496fb7-e533-5ecb-a521-f3bd2b2e4ef9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-chrome.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-chrome.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0afefc4-c816-5b2d-89e8-25aa599ecf4c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-co.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-co.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30eb8075-d3e8-58d1-a8e6-37ee2700d022","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-code.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-code.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f52790-6238-5010-a671-38ca1cc204be","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a2c658c-2d33-5754-9a16-7c09a52a5860","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-coinbesa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-coinbesa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24f9ed98-3e85-5245-ab93-f4a079c48beb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-coinmarketcap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-coinmarketcap.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4c559d8-147d-5287-951b-eb563f3b1035","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-config.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-config.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5df6d22d-3732-5ecd-bd29-b32c960ce91a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-confirm.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-confirm.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96bc87ee-4cbc-5778-b858-7c2e688ba720","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-confirmation.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-confirmation.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39e8a90-d218-517b-8380-907a72502ffe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-connect.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-connect.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--475ca5e7-1417-5414-b417-11ac3431516e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-dash.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-dash.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a83fdb0f-0d22-5553-ac02-82193f6759d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-departmntorgs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-departmntorgs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09288381-be1f-536f-af1c-998fbc2fb09a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-dept.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-dept.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--671f8d94-73c8-5746-912f-0f333e1b5f1f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-details-fr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-details-fr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d12e976d-b086-5c6b-b681-c274a132cd55","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-disn-eyplus-support.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-disn-eyplus-support.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27baac78-6669-5aab-b803-50982fa07d02","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-doordash.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-doordash.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7379735-f507-5dce-9904-ea46e3260e19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-drive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-drive.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b60adb-77f1-5955-b0a6-db88acb82a09","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-executive.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-executive.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a4a15dd-3b74-51c1-80f7-9b14c5bd6225","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-find.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-find.cloud']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca7afb29-e980-5420-8873-0e3bca9aa423","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-find.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-find.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93d1012d-9577-562b-aa9f-fe2d834bd7c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-fiverr.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-fiverr.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23aaea24-bd5c-5919-826c-18bd48b6e94f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-flix.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-flix.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aacc1d3-787a-5944-84b5-a8c67f70a2a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-form874943.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-form874943.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71276f21-48d8-5c96-a641-787ef085d841","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-freedom-mobile5g.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-freedom-mobile5g.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87ac6ffb-00fb-50ce-98b1-79ed8bc783f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-freshwroks.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-freshwroks.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1243801f-e022-5d75-8e6c-c269e6ad6ea9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-fvr.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-fvr.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--477d45ac-e994-5791-8491-a9d46ebec99e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-fvrr.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-fvrr.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd4af611-ba20-512d-81d4-8cdceb9d3815","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-g00gl.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-g00gl.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4f603bd-e8c5-562f-ad41-0a96d5b71465","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-geblokkeerd-flm.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-geblokkeerd-flm.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0ef7969-82c4-5184-8170-64cf710ebfb0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-glkb.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-glkb.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e914a2d-ed2d-5d2a-80b0-ca1779e62c7c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-gmgn.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-gmgn.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--857a17cb-32d7-5324-857c-c0f9f2f2322e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-goog1e.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-goog1e.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd530424-70bc-53e4-b644-012fe90685e6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-google-login.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-google-login.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a2979a5-b2c7-578c-871f-9e1ce33d13b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-google.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-google.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95d3c6aa-13f8-5a19-beb1-2eee0c86bb03","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-help.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-help.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a473ba32-84e1-5b61-b977-a7e8d50832cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-help.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-help.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e4c048c-b73c-5c71-bc4a-fe5f4dd0e4b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-helpcenter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-helpcenter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eedbf14f-2ba7-5ef0-9423-3d90603cb993","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-helpdesk.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-helpdesk.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d4b48e2-bf85-5db8-a755-be20186accbc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-icloud.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-icloud.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0600b81-2a40-5da9-b1ef-be9731eff5e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-identifier.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-identifier.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d3c1e81-b65b-5b66-a7a3-2b80af587b3c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-identifikation.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-identifikation.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5455f9cd-3ac1-5169-9d64-c5b4c4830abe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-import.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-import.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd5cd4ac-8ee1-58cb-8717-d1d8fa82d4e1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-info-checking-process.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-info-checking-process.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3819793-fe07-5dd4-8b3e-a140708cbe5b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-info-mx.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-info-mx.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc77ab89-84ed-5cc4-9ed8-9af5da5fd53d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-info.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-info.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30add836-b02a-5f3a-bc8a-a014c9704e07","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-infoa.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-infoa.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eb83471-6852-5db1-8829-6b019507fae4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-infob.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-infob.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--285b4a4d-97e0-59ff-a1db-2888112104d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-infoc.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-infoc.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51ce851e-91e5-5d78-a99e-2928198fbe19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-infod.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-infod.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5af6e90-7b4d-51e7-86ea-7b400675c459","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-infoe.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-infoe.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba94f416-7053-5883-ae4d-642fe08fbf1e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-infog.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-infog.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7d6c997-f520-541f-beeb-f9b705d4c3f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-infoh.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-infoh.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdda4aa4-a3d2-511a-bb30-3ba4c6997bae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-infoi.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-infoi.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f85b7fa2-e75a-551c-abb6-3f4bf94f5d28","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-infoj.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-infoj.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8cf342f-eaf2-5094-a2b6-bfd0deab1ddf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-infok.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-infok.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4afdc424-a8eb-54e1-b012-31b4ad830815","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-infologin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-infologin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20afaa1d-2d53-5a28-bacf-b851d5b8069f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-infom.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-infom.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3c15e4e-9134-53ba-955c-146a4b6bd6d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-infon.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-infon.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13d1a983-f1bc-54d1-8896-c6809125cd3d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-infoo.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-infoo.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e451d2a1-26ca-50ef-bb75-006d89ccd66f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-infoq.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-infoq.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d26da40-5e28-5505-bc9d-979752abe4a3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-infos.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-infos.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04375423-448d-5d12-b140-fa2902cca416","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-infot.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-infot.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b844385-b0e9-5e2d-967d-e83c2219c0cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-infou.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-infou.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f469672e-ddb3-5029-93b2-666d158435d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-infov.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-infov.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf2c7315-1788-5a8c-990d-40db59fcdc13","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-infox.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-infox.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23585e0a-869a-54a6-b373-5c410be551f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-infoy.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-infoy.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15923ce4-c046-5567-9ce5-a64f991065c4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-kontrolle.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-kontrolle.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73eff0d3-6d66-56fa-9ba8-53585ee664c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-koppeling.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-koppeling.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--658b1e52-5f1c-5369-8235-6fea5b6cc55b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-lnfomaps.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-lnfomaps.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12d1e8dd-7978-5dca-b77f-b06f0b3fd055","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-located.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-located.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b890e35-b1d9-5ec1-bcfb-4e33b296dd82","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-locked-au-gjo.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-locked-au-gjo.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b4a5f4d-1639-57e3-84ce-dae46ce3459f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-log-in.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-log-in.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3baed254-5c93-51f4-a9ae-150b67dad7ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-logiin.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-logiin.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc9ccb76-1004-528e-9207-6a2eaeec6e8c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-login-renew.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-login-renew.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7caec50-2ea5-5651-96f9-7bf1e37cb37b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-login.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-login.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86253eb7-3b78-50f2-85a2-f240eff529d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-login.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-login.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3b012a6-e7c8-5744-9af1-8bb339bfbdf6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-logins.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-logins.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd280e9c-ce51-53de-81cc-947230147b1c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-logln.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-logln.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79a6d192-a3d4-589e-9238-32be54e2829b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-lost-mx.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-lost-mx.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9858aa4-7b04-5eee-b8bb-ff45090156ed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-lse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-lse.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e33c6e-84ef-5e30-b68c-b15e0ceb2dd2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-lse.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-lse.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1b27387-fadc-5cf1-a77f-e0b5475ca01d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-mail-ru.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-mail-ru.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2ed815d-ef10-5546-88de-1b48f7be51bc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-mail.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-mail.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87012c09-4db7-5df0-9e0c-d4de7eefab32","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-mail.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-mail.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b48e42aa-73c5-5391-b7e0-ee22e283d774","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-mail.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-mail.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9d45a25-b172-5284-9c96-5e805261b3fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-maildocuments-xsaas.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-maildocuments-xsaas.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--718ef060-32ff-5b27-a988-c69854636ca2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-manage.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-manage.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5b4d383-e77c-55f7-94b2-91d1660757b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-management.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-management.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80911267-ab19-50e6-bab0-a7ef022e407d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-manager.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-manager.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2dd2d78-c601-5531-9448-480ac7194afd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-managment.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-managment.one']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac0308b7-9b24-5ce6-94a5-f4c5b1219155","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-mapscloud.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-mapscloud.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f7db8c8-e593-53c8-879f-25cbd7a511ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-master.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-master.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8225e590-e59c-5fb3-aff8-8454631e0ae2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-miscauth.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-miscauth.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8f37d05-4828-5453-bb16-f18d9f44a552","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-miscauth.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-miscauth.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ae3e316-5b01-564f-b332-5b517973dce2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-mybell.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-mybell.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acb03f55-9e21-5d3d-8f4c-8c51cf6791e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-myfiix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-myfiix.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30042ba6-568e-5c64-806d-a28a61aa5e45","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-mymx.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-mymx.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6be237e6-08b5-5b38-be51-c2089251b5ac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-netffix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-netffix.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11c89871-b5df-5298-9b08-873a2e1b770c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-netflix.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-netflix.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41bd9b3f-b913-5bce-9728-e297a1dfc42b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-ntflx-renew.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-ntflx-renew.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf09d348-8c57-51bf-b221-13ac02570e4c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-ntflx.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-ntflx.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f71edce-641a-51fb-9252-52c280f348d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-number-on-check.bar","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-number-on-check.bar']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4270170-ffd2-5bd4-9c87-f45bbbed65f4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-number-on-check.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-number-on-check.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2178bf77-2abb-5186-b5a9-e5432349e1b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-number-on-check.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-number-on-check.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d31b58f-3733-54c6-8824-c7dae3846c48","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-number-on-check.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-number-on-check.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea26c9ae-eb67-532b-8584-f87c6f58b88c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-number.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-number.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dcd778d-0fe9-5897-a851-9ffb441ec402","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-protections-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-protections-google.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9593f061-71fb-5d62-9a8e-e58bc06ac6d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-secure-flix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-secure-flix.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--824e195b-73bc-5961-b159-f30ac7450a94","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-secure-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-secure-ledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19820498-40f1-57cc-8921-2b49d917d52c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-securecheck.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-securecheck.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faa45528-fe69-5752-a7cc-47f54efa9676","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-securelink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-securelink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dd3fe30-df9d-5962-8eb0-5caa039e648c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-sign-in-token.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-sign-in-token.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dce79618-afed-5f75-ae8d-f34ceb00b9e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-spotify.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-spotify.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01f67b07-f84d-58dd-9417-28db90eb18de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-support-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-support-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8841b70f-86f4-5926-af10-8d68ba49bebf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-support-netflix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-support-netflix.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1a1c56a-9d61-5a4f-a2b6-2cbcf382613f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-support-paypal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-support-paypal.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--188c12b7-6025-56ad-8bb7-009e81c60785","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-support.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-support.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b1fbc06-125e-59e9-b568-2bbedfc7f6ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-supporting.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-supporting.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46c56190-29e3-5bbc-b162-29901dbd5a34","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-updatea.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-updatea.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b841499-9df9-52b6-9d79-5d4b0f3a8e1e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-updateb.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-updateb.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fecc3d26-c484-5ec8-99c8-0e1e62da2ee8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-updatec.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-updatec.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5089a521-eade-5087-b228-5f76ceb86b71","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-updatee.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-updatee.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c6215b4-6b9e-549c-b634-7b9cfb82a47d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-updatef.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-updatef.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60f705e5-bf72-5668-abab-d7e0def63cc9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-updateh.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-updateh.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37b477d0-8390-5310-af04-e0e2d5449143","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-updatej.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-updatej.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d17973dc-f32d-51c0-85cd-85a95b7501ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-updatek.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-updatek.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--699f99b2-06cb-5f4a-9069-a98541b05060","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-updatel.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-updatel.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6984da1f-1caa-5ce2-bd4d-9b521a1f2e3d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-updatem.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-updatem.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1af70556-7b4e-5c41-bf5e-5d7fef6ecfc5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-updaten.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-updaten.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7900c5f-a3a3-58f6-93f3-814d37e972c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-updatep.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-updatep.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--317c4e87-19fc-570d-ab94-3c7f4671129e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-updater.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-updater.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcd60cf7-9497-5222-9546-c8139f50af5e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-updates.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-updates.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87e69eff-4c74-57c2-a35a-b036ba97a518","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-updatet.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-updatet.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--986590cf-a2ee-5234-bb5d-0d5db18f1583","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-updateu.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-updateu.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8730899-cfe3-58f9-ab65-1c80c657444c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-updatew.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-updatew.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c39a1489-a928-5eb0-881f-55acd9d3f539","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-updatex.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-updatex.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ad62936-c282-568a-9998-1fa3d9fd47f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-updatey.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-updatey.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c44a16f-f122-54cc-92be-860065da7962","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-updatez.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-updatez.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--055b6421-1bc8-5135-a1d3-ee2f567e78e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-verify-support.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-verify-support.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2badb93c-c32e-5ae5-8fee-344b6665ba56","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-verify.website","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-verify.website']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d770007c-0810-5e33-bde8-c0588b75d812","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account-whatsapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-whatsapp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a81337f-d396-5d55-a3e5-be585b167f09","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account05-profilebankofamerica.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account05-profilebankofamerica.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc6246d3-5280-5269-8453-2cd4e44dc00d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: account6-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account6-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e5c6d74-8a31-5814-870e-db736142d9d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountaccessrbc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountaccessrbc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--114efc58-9769-5902-b1f9-190ac95f087a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountancy-linkedin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountancy-linkedin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a68ceb8-0709-5d89-8679-c79201bebcbc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountanthalifax.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountanthalifax.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--382495d1-7eb3-5c99-9092-447ab1077ae5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountapple.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountapple.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91261f06-9cdc-5133-86b3-3b55b73e30c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountcentersupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountcentersupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26c4e982-602c-59ed-a2ed-e0c6dd52e870","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountclaimverify.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountclaimverify.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f05fcb7f-b2a1-503e-9dad-d36bf0cabd2e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountcloudnotificationsautomatedmessagesecurebeenonline.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountcloudnotificationsautomatedmessagesecurebeenonline.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce219a0a-4999-5d6f-9b5c-3b54c4296939","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountconnection.store","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountconnection.store']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8570a82-d8f4-5f9a-9b7d-b72b2a432b1c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountdataupdate.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountdataupdate.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12ec95f1-b9b9-58e6-9529-c4f9a8b69c67","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountdevicesupport.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountdevicesupport.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b096ce27-afeb-5645-a2f1-152dcbb3439c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountforex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountforex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95ba6b0b-3ae8-59ba-a5d2-c9e3951f9191","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountgmailsecure.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountgmailsecure.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce21904e-c01e-585f-b2de-0b913f83489b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountgoogle-ads.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountgoogle-ads.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46f77e69-5347-50c1-ba98-a238a16d6a25","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountgoogle.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountgoogle.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--953b3c84-6579-57f7-9353-7fb9e1a0ffc5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountinfoverify.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountinfoverify.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0f6913f-59f3-55f0-9db7-7aa37b8be3e1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountingbytokens.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountingbytokens.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c49bdf5a-e6db-5815-a0ce-f4ab3d6c28aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountingerrorsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountingerrorsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e22b1c-a270-5052-9cb2-e8d0df84401e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountingglobally.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountingglobally.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3c45d5-0b1a-5f83-97cb-67f6a097236f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountingsoftwareforstartupsnow17.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountingsoftwareforstartupsnow17.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--611b9dc9-64b0-565e-a1fd-beb51a7aa25c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountingstandardvault.best","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountingstandardvault.best']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f257b84f-287b-5106-9d91-881bf4c2f996","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountingsuite.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountingsuite.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff7a02a2-7a94-5c7a-8c60-ce4f60f71c3e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountingupdates.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountingupdates.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ceba4bb-5f54-5a21-8da9-b1b88d4b76ba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountreceivable-linkedin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountreceivable-linkedin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c5d22f9-51dc-54e1-a2cd-f603e71ed7ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountreceivableclerklinkedin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountreceivableclerklinkedin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0feb4a4-baf7-5d31-89c6-b0ba25a365ae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountrecoveryupdate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountrecoveryupdate.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3977245-e2fe-5ba8-897c-4028c1b752e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountreviewsverify.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountreviewsverify.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42403288-f1a3-58df-900e-21ced620475a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accounts-apple.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-apple.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9ddb63e-515b-5b91-8bd6-b33328c0b920","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accounts-binance.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-binance.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91f3e5a9-2425-544f-b855-70f05539b220","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accounts-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-binance.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e4bc284-b4a7-53b2-9489-335900177353","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accounts-binance.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-binance.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52016d45-872f-51bf-9e59-528306eb08bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accounts-binannce.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-binannce.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1163270d-e29e-54b4-a433-43bd67a68540","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accounts-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28d9c233-46a3-579f-929e-3298366a5a22","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accounts-gmail.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-gmail.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7af74bfc-9047-5abb-b5ae-0e809f398556","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accounts-google.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-google.dev']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55ac29c4-066e-5d95-a1c2-222f163eb5b4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accounts-google.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-google.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8094b4e5-8d96-520b-bd63-926ed9bc2ab5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accounts-googleauth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-googleauth.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41c383b2-ad2f-5793-b41c-9def0311dbcf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accounts-jp-larksuite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-jp-larksuite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8f30032-383a-5db2-ad7d-fc585c0c96d2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accounts-netflixmovies-tv.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-netflixmovies-tv.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceda37c7-17dd-5fdd-b796-9a35aacee929","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accounts-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66f64199-6eb0-513f-b97f-35e48b0e13a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accounts-securedfrppcakgedocs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-securedfrppcakgedocs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a221f914-0635-5133-9d4d-531851eea001","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accounts-support.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-support.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b948a868-10fd-57ad-bdda-bdd9d1401b75","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accounts-team-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-team-google.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71000b34-01aa-501b-9ef6-10fb2636243a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountsafety-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsafety-icloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39e4b25a-8d50-53f6-a9d7-3f2c286beb43","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountsapple-br.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsapple-br.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1710890b-2052-51aa-9bb0-c3d5d7876501","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountsapplebr.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsapplebr.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fbf3c57-8c6a-563a-ac48-1c7c64c0c9a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountsecure.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsecure.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d52247e-76b5-5c18-9e9f-196177944073","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountsecurityupdate.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsecurityupdate.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da2a0387-3ffc-5588-89a5-3cd707c74cb9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountspecialistlinkedin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountspecialistlinkedin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90c4642f-cf69-5f9e-84ac-2372da86ec55","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountsreceivableforcash.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsreceivableforcash.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a41049d2-f54f-5dae-85ee-59c59436d86d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountssgoogle.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountssgoogle.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b2bd1fa-c65d-5957-af44-720f0cd61e95","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountstatusupdate.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountstatusupdate.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2014642-28f8-5510-8149-20e17f34c213","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountsuinboxccessfulhome.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsuinboxccessfulhome.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d42c59e7-cdb9-574e-9612-ac1eedc4a346","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountsupport.center","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsupport.center']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21d75e36-06da-5262-a73e-ffb7ad5d2dd9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountsupport.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsupport.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a44280a-2e78-5b62-9a89-4734ea9e0d46","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountsupportdesk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsupportdesk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73e2f8ed-9fa4-5447-9643-4327bbe01d25","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountsupportonline.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsupportonline.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58adf742-860e-5fe1-94dc-221d71d3fa7e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accounttechnicalsupport.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounttechnicalsupport.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17df92bf-95ff-5af2-9210-06a16c999c53","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accounttechnicalsupport.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounttechnicalsupport.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a39138a-348f-5c48-b885-79016ace1d59","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accounttechnicalsupport.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounttechnicalsupport.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bee8955-ad98-5a67-9447-32b0b9ded191","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accounttechnicalsupport.website","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounttechnicalsupport.website']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b258620b-4fa4-594f-9721-b7510db32f33","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountupdate.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountupdate.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0de31ce7-4838-5aa4-b949-e348ffdd42fc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountupdatecenter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountupdatecenter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--194777e0-e824-5388-b849-c08762f1f9e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountupdatecenter.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountupdatecenter.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bf7257b-e997-551f-a51c-42af1bf47f6e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountupdatescenter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountupdatescenter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37db1c70-613f-510c-9552-42513fdfc5e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountvalidationwellsfargo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountvalidationwellsfargo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e15767ad-f377-5ca9-804e-26436fb020b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountvault.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountvault.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8226a5b4-c6ba-539d-b794-d86e376d082d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountverificationsupport.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountverificationsupport.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f232409-147b-5c88-8ee6-4d947975327e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountverificationsupport.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountverificationsupport.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ea87306-0b27-5555-93e2-5d248be35f77","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountverificationsupport.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountverificationsupport.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a070bc47-f56f-559b-8a4b-8d7930efc62b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountverificationsupport.website","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountverificationsupport.website']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb772192-462c-534b-9ba9-459495ef1d04","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountverificationwise.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountverificationwise.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3835de69-728f-57c3-808a-55c9ae5aea10","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountverify-booking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountverify-booking.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40a27e5d-09ac-5326-a756-c2e54dadcc38","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountverify-secrbc.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountverify-secrbc.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93213b13-4a4a-5448-9543-7858377ef26c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountverify.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountverify.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94b0fa53-9001-5732-a58e-d2b71beff510","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountverify.services","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountverify.services']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee2e5a4f-5dac-50b0-ba15-bf3907f107af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountverifycenter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountverifycenter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72ae4eb2-8da1-59c4-a29c-91343a6fa2e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountwellsfargo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountwellsfargo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b58618a8-2730-503e-9e02-b51e55a70a7d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountwise.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountwise.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ddb01d4-34c1-54ed-a53c-1faf83bf994a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountwiseepro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountwiseepro.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9397039-2910-561e-9bdd-5ffdb70f752b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accountwithsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountwithsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25465d58-6086-5d3b-a481-e776f72e5f0d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accousntgoogle.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accousntgoogle.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aa7a5ce-a17c-5c23-b659-e86ef6e604dc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accout-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accout-icloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4170812b-3764-5e53-82c4-aefd3c5361b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accra-first.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accra-first.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4a52a6d-58e2-51dd-9781-c95be74f803f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accra-firstzilo.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accra-firstzilo.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d75965c5-2d43-572c-a8fe-9377802e6f76","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accra-monadian.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accra-monadian.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--289ffcc6-ac35-5695-a129-eacf569c432d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accra-trust.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accra-trust.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fa13cfe-9d92-53b3-9b78-8f15cec9df52","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accraconnect.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accraconnect.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--256d0908-dbe8-53b3-a505-bcc3c89172dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accs0verify.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accs0verify.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--303403dd-60b4-56ca-a5c8-a9d632fa1a43","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accsecure.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accsecure.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--119fb301-6dbe-5a9c-8c34-90ddf443231f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accsecureveriffy.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accsecureveriffy.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49a38f33-4f07-587c-857e-cf62b9b0d198","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acctaudit.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acctaudit.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81839f10-86f8-5112-b1ee-1aa82356d167","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acctivewwallett.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acctivewwallett.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d7626de-7bb3-5dd3-b363-82b2d0c00fc2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accts-linkedin.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accts-linkedin.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee42c7fb-ed90-5b53-b9ca-a0d74b0bb57a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acctsupport-linkdln.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acctsupport-linkdln.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ca412c1-ac1f-5130-8e5a-5dbed06577db","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accttechllc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accttechllc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fd49298-52d5-5a57-9349-e8f4358a720c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acctupdatehub.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acctupdatehub.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d079536-14b6-53aa-82ea-15ba2b59d8b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accubusconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accubusconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5aae2cc-40c3-5a29-a20c-cbbee83fa51f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accubusconnect.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accubusconnect.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42edd869-7994-5fcd-9237-5b56defe55c6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accubusconnect.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accubusconnect.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e205edd8-48c0-520a-96d7-241938e0fc53","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accueatt.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accueatt.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e038ebc-2efd-53f8-9141-e04bf09defe3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accuedconnect.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accuedconnect.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5701f602-b69c-5cf0-9e2c-7bcabb907e2d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accuedconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accuedconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0acea18-aa15-5ed7-a196-1cc68a838cee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accuedconnect.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accuedconnect.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6f0f463-13f2-52b8-a764-a5f4cf01fed9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accuedconnect.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accuedconnect.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86743e55-00ff-5f83-b48f-5be7ddbd6d9f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accunavsensor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accunavsensor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e302dda9-a978-5e75-b77d-8f1c960a7fc8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accuracywise.quest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accuracywise.quest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb741e3c-3202-5246-9d80-f4f30d31d1bc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accurateautoglassandmirror.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accurateautoglassandmirror.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53c9d6ee-ddc6-51c2-86c3-b516b91d457e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accuratecybersecureoptimized.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accuratecybersecureoptimized.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f3df394-dc8c-56fe-9686-5a24dd8d4ef0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accuratecybersmartsecure.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accuratecybersmartsecure.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7214ac3b-a72e-52c9-8c7e-60d2dd33b148","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accuratedhlii.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accuratedhlii.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3472b887-bf6a-565a-a315-df82c70bb437","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accurateeledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accurateeledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41ace7e1-5776-560c-b953-78d4818f023d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accurateoptimizedsecurelightweight.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accurateoptimizedsecurelightweight.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09d99919-f224-51c3-95a0-cb7d6077111b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accurateoptimizedsecurereliable.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accurateoptimizedsecurereliable.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8fd7632-47b8-55cf-8643-b01416cf7b4e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accurateproactiveshieldsecure.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accurateproactiveshieldsecure.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0557e10e-3fcd-54b9-ba21-4e9c95a58c38","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accuratesecurelightweightcyber.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accuratesecurelightweightcyber.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0390aa5-486c-5ad2-8cae-c3f0faff2e4e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accuratesmartsecureadvanced.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accuratesmartsecureadvanced.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--875d66b5-aaa3-5a20-bbf6-ab0bb18690e9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accustomedinaccessible.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accustomedinaccessible.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83112d70-be9e-5d2b-8412-49cc8b041bbf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accutrainconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accutrainconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba8e583d-58ba-5fef-a66f-900970af8ca1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accutron-cutter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accutron-cutter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ae62782-5188-54bd-b404-56cc494a87df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accutroncutter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accutroncutter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fecdaca-9fb5-527d-863b-6070ea02873b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accuvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accuvault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f17ee02e-2998-5b31-b88a-f18c35c15aa6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accvault.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accvault.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--655fc4a3-c4ac-563a-95bf-8b5321edc0b8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accverification-rbc1-online0.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accverification-rbc1-online0.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--419f3767-ba48-5c18-b896-7142ee9f663a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accverify.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accverify.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--728569f8-e964-5fa8-ac3f-9e47c418dd6c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accverifypro.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accverifypro.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d2020f-f248-5555-bfb6-0bb53da3917e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accwisehub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accwisehub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9422d32-5374-5506-b62b-72fc8e33172f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: accyatt.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accyatt.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4cf6f06-5b91-53cb-808f-e05eaa054b81","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acdatt.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acdatt.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--231cd4f4-0d40-57a6-8e3e-998cbee77658","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acdnconnect.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acdnconnect.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32fe41ab-9e33-52d0-948d-66aec057a1b4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ace-amazon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ace-amazon.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6119f755-7796-5475-a039-376f1b4e090f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ace-attorney-anime.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ace-attorney-anime.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e6035af-7cae-5051-a640-7623d23c9592","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ace-horse-farm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ace-horse-farm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bab79198-d4a6-521f-98b1-0a370e7bf805","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ace-of-base.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ace-of-base.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32bd4d05-7ae8-5fee-9c03-c3c7c1f2c031","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acebayen.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acebayen.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71d09b6a-1c5d-5bfa-bb90-6e036970fa95","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acebaylamis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acebaylamis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--876d58a2-87f3-53e7-83ae-6aa3908718f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acebrontattoos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acebrontattoos.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4127f11-07cd-5c07-9a3a-e8f66c5f1015","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aceglassart.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aceglassart.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f93dcfa-798b-5e6f-bf9d-799305cb182e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aceglobally.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aceglobally.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c297d130-fcbd-56db-a7ae-0bfc6f7e05ad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aceglobaltrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aceglobaltrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c40b8bd5-587a-5767-a0e5-a2a5d063bc6e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acehdarussalamtour.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acehdarussalamtour.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e88ade7-cdf1-5749-8712-0a13d51e7040","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acelestial.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acelestial.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b27a530c-ec76-537c-b7f2-5ac02afcc0f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acelinktrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acelinktrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8d51a1e-a39e-5179-a0ab-3b4812c9513a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acelinktrusts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acelinktrusts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7afca691-ffa6-50f7-9dad-4b06ec5c3cde","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aceofbase.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aceofbase.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6d5f7b9-f72d-5780-8521-88441ee0c5ea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aceshareassetsecureofficefl.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aceshareassetsecureofficefl.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7ad0813-7ae8-5763-916b-7a89aeeeda6c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessaai.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessaai.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c5d9128-ee74-5c3d-bb6b-44c55e9f7ef8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessafrpage.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessafrpage.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd41ea62-fb8b-5ee2-8f0c-20a4864d3a8c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessagoraa.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessagoraa.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bad31a89-1916-5706-9247-a128f4bee144","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessaloginpaymium.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessaloginpaymium.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1d5ce7-9bbb-555f-a72c-f84a62526b01","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessando-acessohoje.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessando-acessohoje.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80ad1a3d-661d-5151-a00d-5f9f8d75433c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessandoallps.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessandoallps.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--201951b0-07b3-52a7-8f6a-4cf880bfb2cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessandodiaramente.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessandodiaramente.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9946e0ec-b17d-5c04-9521-21e29e6395c4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessar-nomehoje.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessar-nomehoje.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a304df6-0efb-5ae6-b359-d1e7dc6cf8c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessar-produtos.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessar-produtos.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44566c77-df1f-562b-b80a-163ab7e7ee6e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessar-vivo-fatura-serasa-divida.email","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessar-vivo-fatura-serasa-divida.email']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffae66f7-9c58-59af-a9ec-723fb11d1019","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessarcnhbrasil.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessarcnhbrasil.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e2e1b69-f36b-523f-bd7b-05144d885da9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessarcomprovante.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessarcomprovante.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a26655a7-ed91-5546-b2e3-a9a204bc7e93","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessareverif.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessareverif.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e8d402c-4073-53d2-9bf1-84173db4b546","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessareverif.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessareverif.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71348e4c-82c5-54ce-a51d-630c21cd8454","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessareverif.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessareverif.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc1a8ac7-096f-52e5-8439-23c7b15002c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessareverifi.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessareverifi.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--211806ff-e5e1-5318-ac73-0b5176c34032","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessareverifi.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessareverifi.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--348a0287-5f84-59bc-bd0a-f1c3427d213e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessareverific.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessareverific.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99eef0b6-9f02-5e39-a431-1e4311b475ad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessareverific.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessareverific.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16fe0a46-45f4-5d02-8710-8ca7934946ed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessareverificgroup.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessareverificgroup.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46c30793-4c68-5f07-8321-f65d670a2af0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessareverificgroup.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessareverificgroup.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54e29ba8-bb37-5e8a-adcf-d414fda6174e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessareverificgroup.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessareverificgroup.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92255e39-5d7c-5db5-9bb4-3a24e75d3bcc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessareverificonline.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessareverificonline.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b93672d0-3991-51f0-a835-d158403b6865","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessareverificonline.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessareverificonline.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b75d9ad0-2f3b-53a4-9643-0a89d27c3193","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessarhoje.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessarhoje.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdf50f04-d3aa-5ffe-a5f9-8aae3e4e924e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessarmeucashbackbb.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessarmeucashbackbb.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49054681-e990-5804-881e-8426942c92ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessarmeucorreioeletronico.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessarmeucorreioeletronico.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8a18cd7-40cd-5f6d-87fe-3d584c0b84ea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessaroferta.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessaroferta.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1f690d9-f642-5123-b2cd-c56331194cda","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessaronlinebrbr.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessaronlinebrbr.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cedffb2-45c8-59c1-8b07-66a8c126f9b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessauth.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessauth.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c673fc1-c55c-5f2c-a361-8e12fcfe139f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessauthcbn.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessauthcbn.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ba0c5af-6d4c-5e44-8aa9-01ec5b02931e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessauthen.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessauthen.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef9dfd53-8e47-5f94-9de1-d80f02e414a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessauthenticate.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessauthenticate.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b91c35a5-cc57-50aa-bddc-26d18817bdde","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessauthfsb.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessauthfsb.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--786891da-5430-53ea-b4d4-13291a8f8496","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessauthnow.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessauthnow.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e654d3d1-3f10-5a4d-a53c-85096b8e4c4c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessauthonline.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessauthonline.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e01c9e1e-770a-577d-8bb2-429f89aef568","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessauthreview.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessauthreview.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--972dde39-fd4e-5d8a-9f4b-67d1e23bfe79","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessauthverify.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessauthverify.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07046b5b-597c-5279-863b-8389c7bc2e4a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessauthverifylogin.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessauthverifylogin.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--414b84fd-d817-540f-b612-b153a07f5a47","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessauthverifylogon.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessauthverifylogon.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0294493e-ae0d-58ea-85b3-919450ce34ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessconnectallps.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessconnectallps.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7167e418-8ea1-5abd-8d60-9fee9b93f4d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessmyintrust.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessmyintrust.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11e75052-dc77-52ce-8b67-1171dee24521","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessmyloginverify.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessmyloginverify.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23d908c1-8283-5738-9f42-117557eb094f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acesso-revisao.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acesso-revisao.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cebc3de9-dc77-5755-be1f-ad29acecae70","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessoamex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessoamex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdb251d5-a0ec-5b1b-89f5-060399a2e515","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessonetflix.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessonetflix.digital']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef5c9a12-e43a-51a3-88bc-0fa006923e51","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessonlineamegy.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessonlineamegy.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19d0a948-f19b-5833-ae63-75621aaca4ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessonlineauth.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessonlineauth.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba1e7184-6aa0-5691-b6be-e0cca09a1ae9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessonlineauthen.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessonlineauthen.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc57c7a6-7a18-5e8d-b77e-192516585b76","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessonlinenowverify.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessonlinenowverify.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dc80ea8-385a-538e-b313-c115bfad1582","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessonlineverify.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessonlineverify.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8040b1ba-7eca-54f1-93ca-004351ee7afa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessonlineverifyautt.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessonlineverifyautt.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--773caffd-fa75-5333-ab3c-8ff4d8478d9e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessos-revisao.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessos-revisao.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d141ba53-8718-50ea-9016-be587de064c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessreviewverify.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessreviewverify.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e9a197c-6567-50b8-945a-6646501f5350","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acesssactivatelogon.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acesssactivatelogon.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5076731d-2e47-5fbe-ad39-ba888eb05a6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acesssagora.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acesssagora.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c68f759-d6f5-5295-95a2-dbf59cc7ac0b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acesssauthorize.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acesssauthorize.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9092a4b9-b888-5619-9c61-53921b7aa924","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acesssecureblazedigital.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acesssecureblazedigital.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0320f436-3356-51a0-be39-f708db1d2236","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acesssmycryptsecureinbox.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acesssmycryptsecureinbox.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21147781-9d58-5318-9d60-6e1dda60dd9d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acesssonlinesupport.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acesssonlinesupport.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fd5f737-a6de-5bb3-83fc-ace452d64b67","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessssupportdesk.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessssupportdesk.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebee3a0e-2a2a-5543-ba3d-fc2031539fcf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acesssupport.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acesssupport.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e5a48cd-4f88-57ee-9ffe-4cfde0dc6220","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessupportreview.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessupportreview.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaf9ed2b-a2b0-55fc-9610-ac303ed30529","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessverifyauth.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessverifyauth.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a21786bb-b673-5624-a9dc-4b6ff5b89036","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessverifyauthorize.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessverifyauthorize.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a3b3472-2014-5ea3-8005-948ca4e9fb43","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessverifyent.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessverifyent.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6376440e-c15f-5d9e-ab01-990badcdea38","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessverifylogin.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessverifylogin.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0beefaa-1694-5bf4-b4a0-57916d4ae2a5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessverifylogon.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessverifylogon.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--972b7fb4-77f2-5a0d-a0eb-d34a3f27cd71","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessverifylogon.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessverifylogon.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0511d12c-c262-54c5-bc5b-c53e1714dc99","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessverifynow.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessverifynow.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26b20073-2324-51ca-9dde-b66e66c0d53a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessverifynowauth.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessverifynowauth.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22350560-336f-5bcb-95a4-059d2e9601b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessverifyonline.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessverifyonline.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8388a7e-0ff0-526e-bf66-da587268c469","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessverifyreview.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessverifyreview.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b5ad875-865d-5925-aeba-85ab10832f69","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acessverifyvystarauth.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessverifyvystarauth.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--903632ad-2ae4-59f8-8224-9a32eac2f9e6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acetokenhub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acetokenhub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b300abe7-7e16-5ae6-ab88-cc1747e59df4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acetrustbankholding.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acetrustbankholding.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2880969-fcdd-56a1-8885-55377a3513d0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acevaulthub.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acevaulthub.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83517bd5-8b37-5513-87a2-53b9ba434c23","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acevaults.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acevaults.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad81fa55-fd86-58ab-b7f6-073e0dd13773","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acewise.monster","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acewise.monster']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b988ad62-3dec-5c68-b225-f3934ea27274","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acewise.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acewise.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bffee3e4-114a-5e2d-9852-99ba4245a03d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acgbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acgbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--933706b8-9eda-5862-bdea-e1372eaa3741","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acgbase.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acgbase.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51eb9fa9-4ebf-5ee3-a35b-52a578760140","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: achalmfinanzmakler.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'achalmfinanzmakler.one']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a2ce816-c40c-5988-8f4b-9c51c7acadf6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: achat-or-ou-argent.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'achat-or-ou-argent.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16e7c9f8-8149-5dc2-a3cb-0427e683be49","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: achatcryptostg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'achatcryptostg.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--813613b2-6021-5b63-b009-ad44896d24e1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acheminement-suivi-horaires.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acheminement-suivi-horaires.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6112518-4d2a-5541-a21f-0894fc139262","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acheminement-suivi-laposte.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acheminement-suivi-laposte.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--000f4c41-f440-574d-9238-ccde2de0bd92","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acheminement-suivi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acheminement-suivi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e983e12-91fd-5e89-9705-e02cd363fc75","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acheminement-suivis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acheminement-suivis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65ec9e9a-576c-577b-a832-e147d074e06f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acheminement-supportcolis.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acheminement-supportcolis.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c26f563-c1a5-53de-a69c-9676d710f29a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acheminements-en-attente.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acheminements-en-attente.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bac6464b-691c-5a86-b666-6ef0f3ac7892","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acheminements-suivi.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acheminements-suivi.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b89c843b-9ca7-5e16-b593-5deb1ece97d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acheterdessacsvuittonns.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acheterdessacsvuittonns.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b2c90c2-de58-565a-93cc-1b0b3f8d0e3f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acheworry.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acheworry.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ff427b3-04e1-5297-8d7b-13d495c9ce84","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: achievedigitally.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'achievedigitally.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eff0a9d9-55fd-51c2-94ae-d0f0694ba505","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: achieverealestatefarmingsuccess.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'achieverealestatefarmingsuccess.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2bd9e2c-b1c7-5a0c-a38c-526ec11a5b72","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: achifarmproduce.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'achifarmproduce.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--505fe7a2-ae33-53f5-bb22-8193560e6cc2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: achmadrentalmobilmakassar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'achmadrentalmobilmakassar.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--777ef202-b4af-51b5-916a-d7278041e1c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: achsecurefile.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'achsecurefile.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b56daee6-00e5-51bb-9954-73de9c795839","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acidrefluxsupporthub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acidrefluxsupporthub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1908a76d-2494-535f-a242-b7a24f5019d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acikgozssbonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acikgozssbonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a30d53af-6d57-5f0e-b0ab-98c01d9d09b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acirsa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acirsa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c45fdf97-5d35-5bc4-b8fc-de57dc0c9fef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acitive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acitive.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--369a9387-9fdc-54cd-b3ff-c2df75c968eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acitivityalley.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acitivityalley.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eebf19d-71ae-5529-9617-d0b24d290611","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acitizenscart.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acitizenscart.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--369b2e88-e320-5736-9bb9-193f9feec98c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ackcdn.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ackcdn.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf6f328e-909c-5a83-b8d8-04f7b377d761","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ackconnector.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ackconnector.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4fa0887-c309-51bb-95af-63407f143d48","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acketsuitscom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acketsuitscom.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--659f5e21-d8da-5ddc-9d10-2ddefeb1b923","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ackgarissadiocese.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ackgarissadiocese.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a00c4865-a11f-53b3-93cd-e9d1e1a78605","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acknowledger.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acknowledger.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3716f345-3a8f-5221-8e7c-dd2117ee2bd5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aclaimi.beer","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aclaimi.beer']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aab8a484-4bae-5cb7-94d8-d98af9c8f7d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acloudbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acloudbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a00180fc-a8c5-5d39-9f56-e97f0ddd18c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acmails5-secure-ne-jp.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acmails5-secure-ne-jp.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1956a88d-7fe5-53ac-96af-c40e21084dda","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acmails6-secure-ne-jp.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acmails6-secure-ne-jp.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5db7e67f-528e-580f-9045-5b1c365f469e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acncverify.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acncverify.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf882309-5641-5f2a-9f00-63066ed60a5f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aconlineauto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aconlineauto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70d9413d-ba7f-53c8-bdab-85d9543fb1c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aconnectionsafes.bond","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aconnectionsafes.bond']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a94e2d-eff5-5f32-8b05-611dc913c702","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aconnectionsafes.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aconnectionsafes.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee0cb182-b697-5056-9e9e-bf974cfb6f3a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aconnectionsafes.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aconnectionsafes.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd51193b-08c3-5e8a-bb1e-e8e9794f5e61","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aconnectionsafes.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aconnectionsafes.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1644bf-8a50-53d2-a003-610c51cd86d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aconnectionsafes.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aconnectionsafes.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94588f1a-ba6e-5d10-9e5e-775019aa0802","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aconnectionsafes.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aconnectionsafes.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66c23bbe-b8a0-5fc9-a768-86a6c8ff2b5d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aconnectionsaffes.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aconnectionsaffes.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d710c9bc-6c05-52c1-8df2-30443ea26d15","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acordameetingsconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acordameetingsconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f793937f-cd78-5488-a54c-bd3fb9da1a2c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acorncattery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acorncattery.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7b9be61-cf00-5079-a095-932fc112cbd6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acorreoargentiner.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acorreoargentiner.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c1a623-1178-5852-9970-d80e1e229471","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acountwrlght0patt.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acountwrlght0patt.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f52c5d87-b92c-5ca6-a9a4-9365230641e9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acousticallybrave.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acousticallybrave.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17c17947-1322-5538-bf74-98eabb7e7601","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acousticallybrave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acousticallybrave.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61b8d0d5-3c74-56ad-b797-f83fbc2c9a88","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acoustictrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acoustictrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be157149-528a-534a-95d9-fa41cda4cd0c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acpaylinkedin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acpaylinkedin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c2c5324-488f-5410-98cb-4c103da0ab83","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acpofficesecurefiles.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acpofficesecurefiles.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f29a5c5-641d-56c7-84ef-7304a34888e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acpofficesecurefilesxx.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acpofficesecurefilesxx.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b455e5b0-0d05-5465-a292-c2bdc658a704","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acquafarma.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acquafarma.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--881c6aa2-15a5-58eb-ace6-85162dcf0135","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acquisitionsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acquisitionsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82b89052-6d37-5141-ac41-def77a0741ad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acquista-farmaci-da-banco.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acquista-farmaci-da-banco.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e0d703b-0987-5753-84f0-ba560a08d217","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acquistare-farmaci-on-line.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acquistare-farmaci-on-line.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d814022-84e9-54c0-a3fb-4c9d388b320a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acquistarefarmacionline.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acquistarefarmacionline.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e21a5de-a499-5a08-bc4d-055d4a9bb564","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acquisto-farmaci-on-line.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acquisto-farmaci-on-line.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b2b41c-2f5f-5302-98fd-0cd4971351b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acratrustbar-gov-sg.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acratrustbar-gov-sg.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--595ed225-265a-580a-a9fa-d6a510d820e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acrepairsandysprings.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrepairsandysprings.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb4259f0-4ca9-568f-a1e6-918992c171d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acrisuire.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrisuire.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--705efd32-7b8b-5cc1-91de-cc5d35d1302a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acrobat-pdf-ad0360update-view.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrobat-pdf-ad0360update-view.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5a9fcf3-f80c-579e-9a32-bd987227746b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acrobat-updater.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrobat-updater.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee69a660-8b25-5b8f-b89f-119c3016663b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acrobatsclientplugins-initializefederationconnect0b6a10.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrobatsclientplugins-initializefederationconnect0b6a10.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eba20973-5642-5b20-b4b3-2f78afd23ed2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acrobatsclientplugins-initializefederationconnect0c4e30.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrobatsclientplugins-initializefederationconnect0c4e30.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4edefde-a362-5dcf-9079-07f2936cde9c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acrobatsclientplugins-initializefederationconnect0f9d20.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrobatsclientplugins-initializefederationconnect0f9d20.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0128d002-c2e9-55c3-b600-916f7120c410","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acrobatsclientplugins-initializefederationconnect0v4d60.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrobatsclientplugins-initializefederationconnect0v4d60.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce56a49-cdf5-5b69-b314-8ffe07947d5c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acrossanswer.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrossanswer.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38641b9a-abd9-57d4-acde-d6c6699ef0aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acryptoeth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acryptoeth.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f26b5bb-12df-546b-ac3e-f19c1c3ea30c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acryptostart.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acryptostart.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b08823e7-9174-5f89-ba4b-170b4d333050","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acs-claims.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acs-claims.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d55f2e41-990b-509b-a5b4-12449585f641","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acscups.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acscups.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a53c7ceb-2b77-51f9-87ba-6652eb2b8b7e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acsecurehuntington.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acsecurehuntington.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af05d5aa-65ab-518a-9dfc-e554c69b21ed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acssecurehuntington.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acssecurehuntington.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82caebe9-37de-5527-821a-377ece875522","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acsssecurehutington.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acsssecurehutington.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--028ddd5a-20f9-511e-8246-3ee36f262664","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actcomsssupportscheme.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actcomsssupportscheme.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e10e558-ae1a-551f-b878-7e9facb28352","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actconnect.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actconnect.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cf564a5-fa7a-59fb-9149-11c5d3bdaa61","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actdrinkwise.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actdrinkwise.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4d066c8-237c-5931-bee9-f8bad9fd0e1e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actiingmailines.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actiingmailines.digital']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fbcbdbf-b829-55f3-87a4-8ec15b321bb5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acting-tiktok.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acting-tiktok.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d891d56c-591f-5742-b488-d7a922e6550a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: action-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'action-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dac21da-3c81-57dd-8821-368449c9f76d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: action-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'action-gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07423bf3-f910-5c78-9422-ad556d2ec6a1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: action-id729-dhl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'action-id729-dhl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c354bedf-bed4-5556-8beb-68f93c3ef84c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: action-revolutionnaire.lgbt","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'action-revolutionnaire.lgbt']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c87d0cf-e047-5ea4-bfb1-66c85b49ba94","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: action-strike-vault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'action-strike-vault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaa444bc-8145-5d14-8af6-7bd30414880d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actionablecyberintel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actionablecyberintel.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--653ef2f7-5751-5ff9-aadf-a7f07afb3e01","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actionablecyberintelligence.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actionablecyberintelligence.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7eb3121-3635-5314-b396-f0bbb504bd6e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actionableinnovation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actionableinnovation.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5dac59e-75e5-508b-8b03-661e1904179d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actionableplus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actionableplus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--001b5d87-7b50-5a3a-91a6-9282299a039c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actionableskill.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actionableskill.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--350cd3b1-ac5e-5c4c-8a0a-3787f83356ff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actionableskills.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actionableskills.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36aaa7a4-69d2-581a-bb6a-d4e9312b5c81","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actionaboard.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actionaboard.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3631ea58-d07f-5aa8-9b24-629002edb90b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actiondrivenfarming.blog","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actiondrivenfarming.blog']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e2f96be-339c-550f-bcea-51726cc32807","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actiondrivenfarming.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actiondrivenfarming.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bd4e4f5-064e-5f87-82bb-540178ec8f41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actiondrivenfarming.media","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actiondrivenfarming.media']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--669205d0-d4f8-51a1-b610-9b1195d4856a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actiondrivenfarming.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actiondrivenfarming.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a95dbf-44ee-598e-991c-bfbb2dec8371","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actiondrivenfarming.news","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actiondrivenfarming.news']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5ea7a83-1792-51b4-b565-daf292648d5d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actiondrivenfarming.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actiondrivenfarming.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f1ad9f2-e913-5ef6-aba0-5b9a091ea28b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actiondrivenmovement.blog","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actiondrivenmovement.blog']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffb7d8cd-ff32-548a-97f2-5fcf17c79197","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actiondrivenmovement.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actiondrivenmovement.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a2ccfb-2a4a-58ce-a0f8-c71ee9178e03","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actiondrivenmovement.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actiondrivenmovement.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44545ab5-766f-501e-878a-7bbe8bfbf9ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actiondrivenmovement.media","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actiondrivenmovement.media']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a3f43e3-1d01-595f-b724-e3e1d1c50a85","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actiondrivenmovement.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actiondrivenmovement.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b4f98d9-2bff-52ff-9125-438a468c023c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actiondrivenmovement.news","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actiondrivenmovement.news']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3e3d890-dea5-5ee2-b6bd-d3b21b1a335b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actiondrivenmovement.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actiondrivenmovement.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f41f2e9-7362-5604-b119-841f27248cb8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actiondriventrust.blog","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actiondriventrust.blog']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ac55ae-5301-5493-98c8-d990e2a44163","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actiondriventrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actiondriventrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc77cdbc-6a08-5180-a884-a75123676a8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actiondriventrust.media","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actiondriventrust.media']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ed86480-316d-556f-aa0e-a32082f28713","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actiondriventrust.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actiondriventrust.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e7519a0-40a7-5976-88d2-8b5085847834","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actiondriventrust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actiondriventrust.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51c4be8f-de80-5a9b-a20d-1e487c8d96e9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actionhightrustedrecommended.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actionhightrustedrecommended.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58865179-99e3-5f0e-b028-a33be5e73e67","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actionkrakensocials.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actionkrakensocials.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c1510f5-ede0-5ca7-91f5-1a25ff577e8b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actionpattern.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actionpattern.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73585bf2-38a3-5a14-a660-c9de179b5fa5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actions-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actions-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d40ec25f-1003-5efb-9325-a7ce586179b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actiontattoos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actiontattoos.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62a599f2-7fba-5f6d-ac09-3eb05b943d5d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actioretailbridge.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actioretailbridge.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8502ab6e-0982-5aad-82b8-1fce214b2223","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activateclaim.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activateclaim.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2abeb836-b8dc-5da3-8c63-a3a5b2c0137d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activateprofittrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activateprofittrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a46d506f-8e48-596e-be09-1032587889fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activatewallets.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activatewallets.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--caf29e46-e445-5fb9-abd5-e71bb23d140e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activation-app-trust.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activation-app-trust.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3f56b9e-376c-5050-b193-cc99585a6e26","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activation-du-token.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activation-du-token.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0ac0527-aee9-53d9-bcfd-18db8ac02495","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activation-ledger.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activation-ledger.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17536766-63b6-55ea-8ff7-0b0a553bf14a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activation-recover-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activation-recover-ledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1466f7c1-34ba-5886-82e0-0f8a15ee9c76","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activationprofil-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activationprofil-ledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ebe2af8-4479-50dd-b504-20cde4377e9c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: active-amazon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'active-amazon.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--600cb78e-64d8-515d-8546-570a8e190bca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: active-amazon.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'active-amazon.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd8df631-f882-5e9d-8ec8-1dfe22a9686a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: active-microsoft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'active-microsoft.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--386e22be-f886-5834-aa94-b30a214f0c91","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: active24-claim.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'active24-claim.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--671bf14b-5a53-5a7b-9a93-2f47373f55b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activebalanceledger.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activebalanceledger.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2f3d3b4-1a60-523f-93ab-650223b9b5cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activecitizen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activecitizen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b36ced11-e9b6-5be7-aa22-04d664d00be5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activeclaim.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activeclaim.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6650dfc-d756-5bc9-8782-afa2d59e1a2c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activeclaimonline.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activeclaimonline.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72251a9b-ec8c-5f24-8682-daa12240747b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activeclaims.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activeclaims.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57a2374d-4bff-58c3-91d8-812e1bd7c025","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activeclaimz.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activeclaimz.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9133331e-4b0f-56dd-a3f0-4e377a0d2f26","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activehealthpathsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activehealthpathsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7355a443-e45b-530b-ba6a-4a753c78398b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activelifesupport.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activelifesupport.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c105b10-eaa8-5ce6-a69d-e68cb50d373c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activelifesupporthub.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activelifesupporthub.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d504deac-0702-563c-b96f-3a0134efdcea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activelifesupportpro.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activelifesupportpro.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa8e55b8-7081-5d05-a032-18a8e0d740f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activelifesupportzone.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activelifesupportzone.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a24699f8-7b5e-5c82-8379-a8cc337b5ac9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activemail5-secure-ne-jp.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activemail5-secure-ne-jp.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ff40035-34cb-5f3a-8381-7b901614c4cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activemail7-secure-ne-jp.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activemail7-secure-ne-jp.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b793c9f-4656-5fe4-a494-23a5d90bac09","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activemailkagoyamailonlineautentication.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activemailkagoyamailonlineautentication.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73f687d-b17e-550e-b5b2-5218b8568e29","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activemailkagoyaonlineauthentication.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activemailkagoyaonlineauthentication.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fe1e42b-5203-581f-9f2e-6d1be48f4889","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activemailkagoyasecureonlinesession.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activemailkagoyasecureonlinesession.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67b48fbb-7965-57ea-a7b7-d46d1e31d4e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activenable.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activenable.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c676f31e-5a5e-5127-98d5-a452f37bb54d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activesessionrbc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activesessionrbc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c330dbd8-82c8-587d-8a88-75d42167afc1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activesupporta.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activesupporta.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0a69398-3870-53fd-85cc-f2c57c5be68b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activesupportb.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activesupportb.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce9125d2-282f-58ea-8585-2bd697710735","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activesupportc.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activesupportc.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--581cce57-4335-5586-89f4-a2af21c7b2df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activesupportd.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activesupportd.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b321ba4-9095-5615-9849-33f5b66fbafc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activesupporti.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activesupporti.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5595415d-524c-5bac-b744-3ea241bb33c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activetiktoklikes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activetiktoklikes.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0333550e-f3cd-5530-92dc-4772a01c3038","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activetrustwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activetrustwallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5393e007-111c-5f7f-a349-816b88946c4e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activeupdates.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activeupdates.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dc40460-e2c9-587e-b8e6-08585bfb2120","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activeverify.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activeverify.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71d5a40-b830-5b1f-b5d2-9d536c43caf0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activeyearssa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activeyearssa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a040929b-ca81-508d-8e11-51ec3693df7d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activgroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activgroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--942ff311-7e22-5491-a742-8aa1d98a00ba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activisionsupport.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activisionsupport.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b4adc87-4541-57d2-9e54-982ff05d3828","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activities-detected-trusted-now.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activities-detected-trusted-now.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae1db713-8478-51bd-807e-a5a9772e2044","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activitiesdetectedtrustednow.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activitiesdetectedtrustednow.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23571156-5e51-55ca-b23b-a5939ef120e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activitiesdetectedtrustedtoday.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activitiesdetectedtrustedtoday.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--160c82c3-af56-545f-bf8d-2eaaacaf01fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activityargentina.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activityargentina.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba9aefd0-b3f6-52c1-b67d-d09d15785e51","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activitybasedbudget.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activitybasedbudget.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--652d5bd0-4831-5122-b078-3fc15fb949ba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activitybasedmargin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activitybasedmargin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e23de58-0301-5c43-b896-a98f21bd5a06","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activitybasedmargins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activitybasedmargins.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cda587c7-36a8-51d9-844c-683a7bf6d992","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activitybasedsupport.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activitybasedsupport.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11b0c035-6d82-51b2-a5e3-a86d242c6fcf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activityhabitssa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activityhabitssa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80848159-895a-5004-84a5-488a080d604f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activitymanhattan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activitymanhattan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d90d0278-0ec1-5be2-a498-9906b6a85825","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activitypattaya.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activitypattaya.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60a05021-ae81-5784-b616-14cb3b3a0dbc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activityseattle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activityseattle.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a18441d-8742-5581-b577-1a190d2daa38","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activitystatusupdate.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activitystatusupdate.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7437f6a-db04-5fee-870c-d9155c915102","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activityupdateauditmor-prof.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activityupdateauditmor-prof.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3bf8609-a550-52a9-85cf-27e6b9dce4bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: activosupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activosupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78ef5f89-e3aa-50dc-b368-e9705b0e8eb4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actonbridgeparishcouncil.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actonbridgeparishcouncil.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9334c032-6b7a-5243-aa6e-c8f10a7bf1ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actorsdatabase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actorsdatabase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96f3f089-b09a-50d3-ac85-65cbacf6f915","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actressact.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actressact.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--863d9d79-1b71-5d0b-9834-5f122f453813","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actressactor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actressactor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64ac03a3-cd68-5e2c-8b51-0353def29cd6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actronventures.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actronventures.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70fb2133-6fed-581a-9db1-54d4c4e7369d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actrustonline.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actrustonline.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f55127a6-f60b-504a-90ed-cc98d46a2ccb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actsolana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actsolana.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d921dc8d-da1b-5062-9a3f-e354b1e8a4c6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actsolana.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actsolana.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbc008b-793a-5d8d-86eb-78b7bd28dc39","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actualisation-suivi-colis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actualisation-suivi-colis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5a6c8a5-3f83-54c0-8fd9-9a256f3c13ed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actualitessuisses.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actualitessuisses.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cb8b45d-09a6-5f94-9ddb-c2c26871d37d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actually18.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actually18.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b9e5dcb-677a-55f2-9e81-804a47cec002","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actuallyalison.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actuallyalison.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4f4acf8-2607-51ca-a1eb-59554db38e15","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actuallyasuperpower.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actuallyasuperpower.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bcf1d3e-0543-5d80-99e0-56bc513da510","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actuallycoaching.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actuallycoaching.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d74a2d37-11ee-5154-963f-45d4063ad445","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actuallycomedy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actuallycomedy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91a4abe1-e4d9-5e5e-9397-b99470266645","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actuallycooleveryday.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actuallycooleveryday.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0df144a-845f-5c1c-a419-d8a65f124d6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actuallygoodaiads.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actuallygoodaiads.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef536fab-69c3-5cab-a4d0-cc85c391cd0b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actuallygrid.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actuallygrid.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--298715b8-9fe9-582e-b26f-61b71302d027","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actuallyharsha.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actuallyharsha.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7137e08-f0d5-5cbc-b464-a18c2543d5ad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actuallyold.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actuallyold.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0095de2a-8684-5294-8575-1ea254e1cd88","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actuallywecreate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actuallywecreate.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa4bc91-e802-527c-8238-6a697cb5813a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actualys.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actualys.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ed4ad35-8327-5215-b037-fb9b295eec56","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actuator-linear.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actuator-linear.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--859440cc-b1d3-5214-98e0-ce61ab816e57","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actuator-linear.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actuator-linear.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3427345a-02e9-5c71-b77b-560b40303c16","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: actwise.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actwise.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8ef0bc9-681d-592d-b512-c420b944219e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acudute.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acudute.top']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fd918ae-8f3c-5ff3-ad96-351bb9f99add","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acufirstusa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acufirstusa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20aae86e-57ab-59dd-9f25-9b20e049f448","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acultastx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acultastx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7d869ab-0102-5556-a8c4-67092c973d0c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acups.cam","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acups.cam']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18062bcb-2d3e-5adc-8cdf-7ad1ea8da87a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acupscam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acupscam.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6ea12ab-fc8f-542b-8ed5-c6c8d3043a7b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acupscams.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acupscams.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4a91107-0360-5006-8135-9073bae70560","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acurastclaim.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acurastclaim.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a56e2e84-97c4-5c17-89c1-687d6ec7a78d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acuteapple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acuteapple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66dabfb8-84db-5da5-8d5e-e9def6fe1fe2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acverifyhuntington.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acverifyhuntington.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a0163c3-fe50-59f9-8b71-6adb694f247b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: acyen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acyen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92e46fd3-8b72-5089-a66c-00b31f6383de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ad-businessapp.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-businessapp.digital']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b57bf8b-33f5-5526-b2bc-96b4e23a6ee4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ad-connections.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-connections.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7113c1c-86d6-573c-a0a2-db351b1e762a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ad-opesecure.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-opesecure.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1a67010-e695-5136-a402-5276e5dd20b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ad-secure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-secure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03db32dc-4a0e-5197-87da-20182ea67447","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ad-supportcenter.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-supportcenter.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79eb9265-6112-5791-a251-f8fcc11f1af1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ad0bexpressacrobat.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad0bexpressacrobat.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b630650-0ba8-5448-93fe-6c74b26a6c50","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ad1n.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad1n.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72c18107-7d56-506f-a73c-aec7dbcfb450","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ad2bitcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad2bitcoin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f884151-abd7-5bd9-b951-b332a13a4296","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ad4rchr39w8f.store","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad4rchr39w8f.store']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f14dd76d-8046-5ad2-9293-29fce2c47127","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ad888.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad888.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69c9915d-940e-5f18-9938-700addc896dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ada-handelssystem.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ada-handelssystem.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d4626e1-dfed-5471-81d0-384016faaedf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ada-staking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ada-staking.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9915a6cf-aa4b-50ec-91ca-83cd68eb7579","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ada020202bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ada020202bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b43e3d5e-2ba8-50f6-87ee-f86960a209f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ada2121bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ada2121bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87f74e39-2ba1-5035-a933-3002af6770a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adacrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adacrypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c884f965-f4f6-504c-b02e-fd7735783b17","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adaicloud.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adaicloud.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfb82333-ac9b-5a02-b382-d450e9b96004","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adalbertosecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adalbertosecure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--103ce42b-01a5-589a-b52a-406d06a99be4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adalso.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adalso.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbe83d94-53cb-509c-a68d-c2ed984aa45c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adamandalyssa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adamandalyssa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f23f8e8b-a80a-50c6-9fad-05a3522388e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adamantgroupsb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adamantgroupsb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab072146-c5d1-5303-9d35-0d2559a471e2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adamawatts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adamawatts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67d6b365-99c1-5ead-9ae3-ac644d88d3ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adamistvanconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adamistvanconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66ef2aca-e8f4-525d-9fe5-c292fa8d24fc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adammatthew.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adammatthew.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06e30fca-b2dc-5a99-80cc-64017bac5f0e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adampatten.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adampatten.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9c7709f-ed88-52ab-9209-e154a4e0e920","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adamrosatti.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adamrosatti.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9ebe74f-6cc2-5c91-a2d5-c6ef731004ec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adamthomasapplebaum.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adamthomasapplebaum.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee9d4156-d63b-5913-aca3-d50b16ce2e65","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adanabakimevi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adanabakimevi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a7aa235-90fc-51d8-8def-8e7dad20fd7a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adanabdi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adanabdi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4934cc08-a738-5746-8cc8-45393fa1da4b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adanabilgisayarci.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adanabilgisayarci.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--175bb4cc-6575-5ac9-8200-560a6f504fa1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adapterbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adapterbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--872d47ab-1595-5e88-8442-4685154d8f6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adaptionalclaims.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adaptionalclaims.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef37e721-6815-51df-b342-2e7dc8be0ddb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adaptionalclaimsai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adaptionalclaimsai.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a032d1e6-e7ab-5e4d-932d-a19e795e0009","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adaptionalclaimsapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adaptionalclaimsapp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1755a355-e477-5b79-bff4-7b0712d2a530","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adaptionalclaimsdata.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adaptionalclaimsdata.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea4e5aac-597c-56b5-85dd-894eeb8da2f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adaptionalclaimsdigital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adaptionalclaimsdigital.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fee35a4a-233a-5696-b1c2-ff2583ca130e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adaptionalclaimstech.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adaptionalclaimstech.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f17e633b-c796-56ab-a66f-0a155b74756a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adaptiveinteractionreview.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adaptiveinteractionreview.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf268bb0-452c-5389-9ced-812e3c17bc22","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adaptivematt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adaptivematt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6185f80-7671-5183-a3bd-c7b43854ebad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adaptivepatternindex.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adaptivepatternindex.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbe16b50-a1fe-5ac7-a210-4af9087ce729","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adaptivepatternsjournal.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adaptivepatternsjournal.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8889823-5a9a-5337-8ec1-3cf400acf543","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adaroobonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adaroobonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562effb7-224d-5242-beee-d4f9e364ac14","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adastraeonpurchaseflow.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adastraeonpurchaseflow.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecf1dad4-db76-547e-9498-3bf4245ace82","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adatabase.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adatabase.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9fc9855-8a3d-5490-a9cb-1f2b3c9095a1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adattrk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adattrk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e39a6d1-4917-5ec7-9bbe-2d6e66789f56","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adaupdate.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adaupdate.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6768ad1-4b8f-51fb-bf2f-59640fa59cf3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adawnabell.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adawnabell.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ebe5b50-1279-529c-b21f-61f6dbdfa1dc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adbankermessage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adbankermessage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--227b16cd-8f0f-5087-b4f1-9148abec056e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adbaseballgear.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adbaseballgear.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0f54839-e88c-593b-a45d-baa2d030263a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adbattery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adbattery.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c5a2170-1bd3-53b2-98d7-379d922f4441","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adbmi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adbmi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb5aaf3-5d4b-580d-8b47-12b5f4f2db5b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adc-job-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adc-job-connect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--556a84e7-be68-502a-945f-d565627b7f60","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adc-jobs-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adc-jobs-connect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4560ec1-7079-54dd-9c75-3d219e8f15d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adcade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adcade.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5f7f0bb-14ca-59df-ba3b-1e562f4d66c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adccareersconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adccareersconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--147a74d8-8067-5660-9d28-8596b4db4d8b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adchasegen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adchasegen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb652f89-f3ce-5d38-aa82-36e702508ea7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adcjobconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adcjobconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7933430-c615-566b-9904-aab2fc13de2d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adcjobsconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adcjobsconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cd535a7-7e2d-526b-af1b-1424cb3fe950","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adcleanzweo.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adcleanzweo.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df6d0632-9e57-5e04-939a-e2658307360f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adcomintelligence.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adcomintelligence.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d39e24db-2cbf-56ec-9a77-1f5e01def792","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adconnecta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adconnecta.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24f98212-066e-5c6c-a5fc-3d9a319ca7c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adconnectbr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adconnectbr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98382a05-0954-5945-8c60-35261a4c58cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adconnectbrazil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adconnectbrazil.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97932716-30d3-52cb-ad24-801c3668e43f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adcrypto.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adcrypto.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a321f1ec-5224-56b2-b11e-4612cc197d0d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: addedvaluefarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addedvaluefarm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea0e7398-287f-5166-a282-85f1547e0de2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adderss-update.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adderss-update.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae6d863a-078d-5e5e-8d8d-d27383b32f32","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: addessacoffee.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addessacoffee.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cf1e758-ddf3-5a83-85b9-c5371582c1d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: addicted-attorneys.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addicted-attorneys.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--095a4c13-73ab-572d-8453-f5f5a63d1a0f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: addicted-support.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addicted-support.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2094a100-ba50-51dc-b06f-dc76ecddccfa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: addicted-usersupport.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addicted-usersupport.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7fe39b0-50bc-5656-ac97-c749cdd9b2e1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: addictionactually.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addictionactually.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aea6e50c-4139-5640-a08d-f76d3bbb83d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: addikit-support.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addikit-support.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22c61c4d-673a-5fcf-93f0-c68d37225c6e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: addinginstancesroadmap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addinginstancesroadmap.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fc0681a-e508-512b-84c2-43eded80d2ea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: addismassagegirls.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addismassagegirls.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17c2ee98-8dfd-50a3-860f-b1750c55ca26","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: addisonattorney.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addisonattorney.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d52041a8-afce-5549-acf0-a084cae57dd5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: addisongroupsearch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addisongroupsearch.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e21ddcd7-1e6e-5685-83b7-df7fb45e7b5b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: addissexmassage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addissexmassage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd6e9438-5efd-5483-a410-da6f6cb45c23","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: additionalfundsforasbestosclaims.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'additionalfundsforasbestosclaims.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fc6a7cd-d1fc-5e9c-a1d9-c32bf72a3822","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: addprofilerbc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addprofilerbc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33293023-68b2-5ec5-888f-bd3dfc3cd6dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: address-generator-bitcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'address-generator-bitcoin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89931326-554f-5bf2-8187-4e2bc863bf53","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: addressaidafrica.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addressaidafrica.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c253088-b438-57ba-bb2e-84e0821b470f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: addressarena.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addressarena.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86b87e79-99d4-536e-9125-9a1442d5808c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: addresspoint-support.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addresspoint-support.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b870d5f9-e9d9-5313-ad10-ef8421399648","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: addressverify-post.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addressverify-post.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65734f6d-5ba1-552f-b95a-b5569d475ccd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: addsmint.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addsmint.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--046262fc-8552-5b1b-8d1e-9274ff98069e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: addssa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addssa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29953b92-79d3-5270-a683-d6f6ca714f6e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: addthief.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addthief.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e8882dd-452b-50e4-8aa7-6e885409021a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adecco-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adecco-connect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69650247-4483-50ea-bfc1-0e0c300216c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adeccobridgezone.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adeccobridgezone.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--174a9e2d-32a0-593f-897e-ef9d982b76b7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adeccocareerconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adeccocareerconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22a344b8-2e2f-5dd5-9fae-548b8b6e93ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adeccojobconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adeccojobconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724ff1a4-e40a-5187-ae07-711092606cfa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adecconnectgroup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adecconnectgroup.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55fc2b42-816d-518c-ba6c-01671afbd246","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adeccostaffbridge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adeccostaffbridge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a1b32f-f185-5a07-b185-f7b0cae7224b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adeccostaffconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adeccostaffconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79acb027-292a-5194-a922-28c152702bf2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adeccotalentconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adeccotalentconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42ab86aa-370f-53e2-bf7a-e6cce6999bfe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adehabattery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adehabattery.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f49bbfa6-ce6f-5601-aeb3-0d363b3d70b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adelaidehillsironingservice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adelaidehillsironingservice.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff122b32-faee-51e9-b5ed-e7017eb85513","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adelinabrand.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adelinabrand.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0dddc7b-3b21-5a24-86cf-7b266250855c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adelineadcock.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adelineadcock.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39d5eed0-34e7-5366-9c58-6c867a4d1814","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adem198461bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adem198461bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--018eafb8-671e-57dd-9a60-6973fff2606c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adem4118bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adem4118bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39a0e16-1330-5bef-8f89-eda080078463","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adem61bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adem61bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5437052c-a845-5550-997b-04f38baf375c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ademanzana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ademanzana.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd2b0259-d5fd-5da4-b9a0-ebe47cd04f3f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ademreis3434bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ademreis3434bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c8bb15-bccb-5a23-8a78-1c1c9b77820b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ademss16bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ademss16bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--135d9a00-66cf-513a-a182-5b9b1834b99c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ademss16bonanza1.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ademss16bonanza1.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--988a1fba-b277-5c29-b058-3df12550d0c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adepgroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adepgroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b79faf1b-939f-51c0-a751-9452639de114","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adeptgroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adeptgroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31600f98-d421-55f2-88b5-c61f7cfa403d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adeptronic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adeptronic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2aeecef-aaa8-52cb-b68f-9801f95563b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adeptronix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adeptronix.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--954804ea-76d8-5108-be10-fb60c3e67369","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adequatelyattire.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adequatelyattire.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--451023aa-cd11-584b-ac6d-dc6ebd55a7ef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adequaterange.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adequaterange.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd34b070-5c2c-51bd-8b2f-0984add94523","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adesgroupsholdings.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adesgroupsholdings.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c57001d-12e9-5ebb-98cf-476494e0bb74","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adessae.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adessae.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f991db-a272-50fd-8efd-3a62a58e8669","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adessawinters.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adessawinters.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a97e2ab-2f78-504b-96a0-28fe12c80a2d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adewoleiadebayo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adewoleiadebayo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--090573bf-42d4-51b4-926b-3e17908f5740","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adfacebook.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adfacebook.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a9240ca-7a23-583a-9093-8abf98fe3101","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adfinanz-group.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adfinanz-group.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df26efff-4e2b-5fcb-bd10-d719ef97d168","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adfirst.studio","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adfirst.studio']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f91709a3-c01c-511e-a440-61a9e187c7fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adfrika.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adfrika.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86da213f-8e86-5d82-b9fd-e1feff67d1b7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adfsmicrosoft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adfsmicrosoft.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--780e5b8b-b19c-5b76-82ea-657b02d18539","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adfsuiv.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adfsuiv.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--394602d4-95cf-5da7-bd6d-50073298211f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adfwe3rvwerga.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adfwe3rvwerga.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbcc9c46-7022-59d0-a2bc-57cab511c0c6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adgamex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adgamex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80473322-42da-58ed-b047-46564b2884a1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adgoogleboard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adgoogleboard.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baa995ca-b385-5faa-8958-4f198a1aaebd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adhdwomensupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adhdwomensupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a304a66-59ba-59cb-b4b4-fc020b2199b7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adhfconnect.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adhfconnect.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--655d9f9f-3d50-5813-adb4-cea87cc4988a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adhlmi.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adhlmi.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88595474-c163-56ba-9a9f-f195793708a9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adhlp.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adhlp.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20377e7c-3f0f-5927-8de0-4844d0c36f63","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adhlp.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adhlp.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b82ced0d-626a-500c-bab8-cb00c84a56ef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adhlraship.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adhlraship.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6cf1cfe-4b5d-5b6a-8b4c-7d59dcef597d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adidasbestbuys.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adidasbestbuys.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0be7fc3-4ada-53ef-8c04-016cf67ec6e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adidasgazelle.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adidasgazelle.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a99ff6a2-aaeb-5627-86b9-9b5dbcd013c6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adidassamba.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adidassamba.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6290c6bf-b3ae-51b9-ad29-4642733cebff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adidasyeezyshoessale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adidasyeezyshoessale.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3287b8ac-2de1-50a0-8a11-72908c13a607","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adidomefarminstitute.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adidomefarminstitute.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef4f2849-2b57-513b-a22b-fdb007d66729","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adilbakir584bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adilbakir584bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9d1ac48-6216-5026-ba8a-a82d63f195ac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adilbakir584bonanza1.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adilbakir584bonanza1.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e69f9973-f983-5074-b506-f89a500d184d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adilgrbz13bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adilgrbz13bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab4abe62-3ddd-5f1c-9222-2cc6becdb1f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adinx06-ssau01s.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adinx06-ssau01s.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b766621-5d83-59fc-8b01-1e2fabbe58e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adinx06-ssaus.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adinx06-ssaus.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5ef3caf-3624-5e1a-b604-1fa81eeb3cd8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adiosbase.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adiosbase.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40d3071d-7b48-5d11-bea4-e36330fab316","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adireto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adireto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcd3f738-3991-5791-8e3c-d6cfe9a84b11","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adissan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adissan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68b4b2b2-3b33-5310-a36e-1a64d0d7854f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adisuihghgijouhg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adisuihghgijouhg.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf9466f3-71d9-56b3-9bb1-7ab5feb9a094","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adiwattspain.cam","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adiwattspain.cam']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33106844-6833-5a1a-816a-a39e6ded9ee0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adiyattechnology.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adiyattechnology.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1f541b6-0e66-5eca-826f-95ee7d44009a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adiyattrading.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adiyattrading.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2c7bbde-a314-5bbe-b41b-f0ce023796cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adjrevolution.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adjrevolution.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--909ddee2-bc0d-59fa-8e4e-3082822ac541","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adjuntosnecessarios.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adjuntosnecessarios.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0898b13-dfdb-52a5-889b-5df206a56d73","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adjustable-mattress-5480.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adjustable-mattress-5480.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63fc7781-09fe-5d47-8c10-643c41a741b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adjustable-mattress-7128.bond","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adjustable-mattress-7128.bond']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01d6c4e4-88d7-541d-9a2e-4ad190fd1761","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adjustedcentrelinkwriteup.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adjustedcentrelinkwriteup.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85cc2091-8890-5391-a250-4fe420274349","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adjustedcostbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adjustedcostbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e6b5e3-403a-5cd5-822d-5594d27a013b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adkbm.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adkbm.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--281fc641-e5db-5795-a48e-5c32d261f22e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adkebraxcrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adkebraxcrypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0a38467-8caa-52ca-9932-674bd124ba4e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adlanzoomdesk.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adlanzoomdesk.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7795f3e8-ecc3-512c-ad19-96814fd70608","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adleadoff.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adleadoff.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2572ec6-e7c0-55c9-979c-4f0c208bc999","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adler-anwaltskanzlei.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adler-anwaltskanzlei.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ba8cd10-a2fa-546a-a923-04a40f006055","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adlidosya.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adlidosya.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb466778-3abf-5c53-8dc3-2f9483a17ed9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adlidosyam.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adlidosyam.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccac1693-d9be-5b43-b9a7-4bed4b53dfe0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adlidosyan.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adlidosyan.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90d6d7c6-a4b6-5cca-b5d9-4965bc320d2d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adlidosyasorgu.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adlidosyasorgu.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d60ca81d-872c-5df3-ad15-6eee07a5fd53","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adlidosyatakip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adlidosyatakip.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14234fdd-94c9-512f-aa13-428b70ab9ca6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adlinteractive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adlinteractive.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef4f1728-4de2-58ea-b39c-79110c49cba3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adlux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adlux.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb68533-2274-55e0-a680-38392337a3d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admafarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admafarm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e336f29d-8b9e-593e-8ba8-3f4be03b5601","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admarketingads.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admarketingads.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d935f4b4-119f-533c-92c6-728ea41686c6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admgoogle.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admgoogle.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01796abf-477c-52b7-a98f-ee8e57906c5f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admianwepssa.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admianwepssa.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42bdc9e7-0836-5cc4-95f5-b8a2cd93735c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admin-authverify.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-authverify.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--370df6f1-2f39-568d-8a70-99f7dd765b6e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admin-epayto-inlinkedin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-epayto-inlinkedin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45525ecd-b8ae-55fb-aa30-fe744c317d68","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admin-support.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-support.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df00ba9e-4db7-5b68-a4f6-a6e7943b79d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admin-support.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-support.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a2bc0b2-fc53-5164-8d0b-6f2a3cfa4aa5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admin-supporttttteam.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-supporttttteam.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bdf8ae8-d283-5c0d-9eb7-5870965dbb83","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admin-supporttttteamme.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-supporttttteamme.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4da0729-b2e8-570e-a56c-b554a48c0c21","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admin-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-trezor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4a6a559-af13-56c5-8d01-ab5ff2215e01","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admin-trustnet.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-trustnet.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0c931b3-b7d1-5741-86c4-ab6b2c8b0e0d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adminavtattech.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminavtattech.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6099db48-4eac-555b-84e9-98e2eca9e4f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adminbookingverify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminbookingverify.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ff91741-205a-53f5-b9a3-571fa92e49c4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adminbptoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminbptoken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fda5cbb0-2c7f-5179-96e4-6af2f300ec70","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adminconnects.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminconnects.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68cb9784-1554-51b7-9d63-702b32c4d0ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admincontrlrefsupport.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admincontrlrefsupport.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a1f3203-9477-5217-9bc2-7a1e9753533e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: administration-secure-files.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'administration-secure-files.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7177706-bbb1-5f2a-a660-3d878ae8d65b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: administration-secure-files.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'administration-secure-files.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92bc0545-ec12-5958-babd-1278e36a0072","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: administrativeconnection.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'administrativeconnection.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e83f3e9-a3b3-5b29-980f-645eabd454ac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: administratorconnect.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'administratorconnect.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--547dec29-bc27-528f-81d6-decdd5e7e8f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: administratorconnects.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'administratorconnects.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d91900-c8a5-55b9-b97a-b3248deb140a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: administrone.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'administrone.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52dfc9cb-d7a2-5e00-ae28-67e5cdd687a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adminsecure.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminsecure.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a2137e-0356-59b0-a46d-cf473c9d58c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adminsuite.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminsuite.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8cb146b-d743-518e-8c76-ae11c8c7f1a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adminsupporttttteammapp.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminsupporttttteammapp.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a83870e5-91b3-5545-adb8-20def2033534","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintank.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--086ca582-7c7e-5d7e-a205-e70c3febc342","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adminteamx.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminteamx.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3678ee9-deab-5e6b-9c4f-afc963c88ada","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adminterrabet9hm.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminterrabet9hm.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--103d4120-5f55-562d-a48e-d916aa688f97","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintgroup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintgroup.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5b84eef-d2a5-51d7-b8df-4f7a1b1ccbce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintktops.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintktops.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f91b71c2-c9e1-51a7-b883-ef1fbe88c50e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintogel.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintogel.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec35c843-078c-54c8-b570-c252a9dd6ea3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintogel77.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintogel77.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--437abc3a-0b78-54f1-acb7-e99e21333ad9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintogel77.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintogel77.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2aa64bc-7e97-5081-918e-9d01bcc849eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintogel88.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintogel88.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd740720-5395-5c84-9c85-7038b3201050","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintogel88.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintogel88.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f31f10ff-8258-58f8-9e6c-0645eea2492a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintop.casino","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintop.casino']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e46bde3-e39d-528b-a745-a65d64c5ddf9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8528c6ff-55dd-5a80-b1ca-164ca4a2b7d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintot.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintot.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1932084-f91d-59dc-b2e6-797744a07f4f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintot.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintot.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cfded4f-10c7-5ed6-b9d1-de3f815121ff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintoto.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintoto.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8db4f76a-528f-59ce-a635-678b1a2aa8db","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintoto4d.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintoto4d.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ea2b93f-7b9f-5d38-ab62-10e192a2e335","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintoto4d.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintoto4d.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94dce92f-0a15-53e9-9e70-de887e916eec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintotologin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintotologin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2fb09b1-4103-562b-b796-b148fa4c8032","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintrack.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintrack.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ee5e944-e7ad-521d-b61e-c4c94f685830","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintsimasterclass.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintsimasterclass.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4686e8a9-f8d7-51e0-b4e3-31646cadd4c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adminturnertcco.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminturnertcco.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5521c679-fd27-5de4-8308-601fe40369b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintv.asia","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintv.asia']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--707c5f91-155d-5988-9a70-fb35a2e30326","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintv.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintv.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f970031-e0d3-51d7-a4d6-172ddc14cdf9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintv.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintv.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4696d503-2f11-5ab3-8036-45b212dad754","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintv.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintv.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31706b0f-1824-5208-a21b-ecf87acd022d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintv.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintv.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8484b5f-691d-56a1-a20b-b9f5988d0da9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admintv.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintv.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22c69960-c8c3-5ef7-a296-c372b4661786","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adminus-ssa.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminus-ssa.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0118720f-bb11-5de6-815b-1411217da6a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admiralsecuredtrades.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admiralsecuredtrades.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96ea7ae5-0fc7-541b-a6de-844a74f00aa1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admiralx-pixelbattle.space","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admiralx-pixelbattle.space']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b475250-0148-5a60-8776-41faded9f6d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admiralx-pixelbattle.website","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admiralx-pixelbattle.website']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93b45e5b-5551-5ae8-bc67-040b4cb2adb8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admittanze.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admittanze.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12e066ef-5ea9-53d6-b205-25b804c64eb4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admix-ssax01.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admix-ssax01.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11d32be6-64a6-56aa-ab91-1a5cede1d3da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admix-ssaxsprt01.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admix-ssaxsprt01.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32da8499-6b0f-56d9-9bcc-955ca716fcf6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admliemirsaic.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admliemirsaic.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2846282e-e9b6-597b-b7e8-dd263e952f94","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admnx-ssaheip01.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admnx-ssaheip01.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e4bb7f3-2412-55c5-ac55-e3160bd907aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admsupportnfecertingbr.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admsupportnfecertingbr.cloud']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20c6d4ae-9286-5b5f-b959-a6346e5cc179","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admweb05jupiters.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admweb05jupiters.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cf7b015-facd-536e-925d-53a5d5998151","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admx-helpssab0h.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admx-helpssab0h.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92ccf59c-db2c-5148-bac3-91b99804beab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: admz-helpssa40usa.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admz-helpssa40usa.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--614c414f-7d2f-56b7-ba80-fae82524edd8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adnabuportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adnabuportal.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea42b09e-5513-585b-9e53-5dc2b3d7953b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adnabuportals.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adnabuportals.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1d228a4-c187-5a59-8be1-020a82e6cc5e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adnabuportasl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adnabuportasl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c808249a-b962-5bac-9fa9-0cdf45d3052f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adnan-electronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adnan-electronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf044811-1107-5dfd-90f0-3241729ba5ac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adnan54bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adnan54bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ca03bee-74d6-5c73-8bc7-408891f60cd8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adnelectronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adnelectronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5377684a-7643-5493-9eb5-47de221e9573","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adnx-help01ssa.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adnx-help01ssa.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3617636e-c54a-5696-b47d-b0dca11604f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adobe-ms-update.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobe-ms-update.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--affc96ee-ad5f-582b-93b9-e031982d737b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adobeacrobat-update.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobeacrobat-update.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d7d8bb2-4136-5c9a-a335-9e81dd140e6d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adobeappsxpyrf-update.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobeappsxpyrf-update.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edd0a9d6-db50-52fe-bcae-f663537776a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adobebusinessai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobebusinessai.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec66f465-cf8d-5656-b67f-e33937ae2fbb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adobeconnectupdate.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobeconnectupdate.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be99551-e96c-59d0-b061-7c1fc0aaa55e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adobeinstall.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobeinstall.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43baf144-2dba-5f5e-a46f-d70743905556","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adobekirbonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobekirbonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--960e9165-085b-5382-978c-3d3f2355e2c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adobekirson.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobekirson.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--378ee0fd-ae57-5025-90d9-f77a31292d74","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adobenewversionupdate.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobenewversionupdate.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f57a8233-4529-517d-8788-d9240bf47c03","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adobenewversionupdate.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobenewversionupdate.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d26a26a-c455-55d2-afd7-5b1da09907c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adobepdf.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobepdf.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25929c9c-ebed-5985-98c9-f8efb0e5d82f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adobesoftware-update.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobesoftware-update.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d60e0b4b-bada-53dc-8468-fe4e358c776a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adobeupdate.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobeupdate.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1de7da18-434e-58af-8d91-681e8bf9c7ad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adobeupdateconnect.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobeupdateconnect.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c94b319-3583-5c2e-9b25-87476a4c5cca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adobeusecure4reader.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobeusecure4reader.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04fae4ca-9982-5e71-afa8-fff8daa0f7ea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adobeusecure4reader.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobeusecure4reader.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--926f8f6d-db4e-59e9-805f-7000909bf51d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adobezzupdates.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobezzupdates.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bf5653b-75e9-5fa4-b7ff-ede64072e9e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adoebsecurely.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adoebsecurely.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ce20634-6414-5293-96d6-d8fdaa503796","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adogmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adogmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c6acf67-9987-5d31-8608-806b89d6b0c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adointeractive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adointeractive.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30a3f091-9bf8-5f9b-8be4-c5ead1cec767","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adoirsa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adoirsa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5400462-23a3-5643-b05c-882e7cff6049","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adonaicloudhosting.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adonaicloudhosting.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08dd96e0-ab85-5d51-95cc-87e1daa87915","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adoofan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adoofan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d9034e1-2c9f-516c-a542-34f8fb862cff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adoptanorca.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adoptanorca.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af67c29e-5b6e-524f-a806-a7ac1c6c8990","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adoptpups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adoptpups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce109d7e-4884-56fb-a162-8ec444f2705d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adorableold.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adorableold.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a655388a-9c43-558c-b825-7ef3cc641f05","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adorapups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adorapups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20d31d0d-79a4-5a8d-92ec-ce5148cc8838","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adore-mints.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adore-mints.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--762f060b-6fd6-5ca1-8458-4b58ad7375b9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adp-accountant-connect.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adp-accountant-connect.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3870837f-3a96-59e7-8bb1-28abcef303d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adpeak.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adpeak.digital']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--327e93d3-b17e-5b7b-9177-47e1eed6722d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adplushub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adplushub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b1b1449-02bd-5c9c-9b77-6406357a84c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adportonic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adportonic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--965f7d40-3a1f-563f-8d81-4974fee114a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adpsecuremessagedeliveryx.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adpsecuremessagedeliveryx.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--745d81ad-8679-543c-ad13-dc5f175cf6fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adpsecuremessagedeliveryxxx.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adpsecuremessagedeliveryxxx.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f26de6c-3f3d-5c4e-b021-940100fdd10b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adptattoo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adptattoo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff4e327d-ff78-5e7c-893f-85932c5496df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adquickdiscovery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adquickdiscovery.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--749b7aaf-d3de-5320-8574-d23383fc2a0b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adr-support.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adr-support.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--814a9895-479f-51c5-909a-131221a0b6d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adrbcdental.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adrbcdental.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cd3ede0-95c2-52fb-ab10-3aef9fdc2a59","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adrbcdentalvip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adrbcdentalvip.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6357d78-d1fe-5731-a7e8-8fce776d0e49","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adre365suiss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adre365suiss.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fce88e58-bf30-584c-ae79-8cf76f06c3fe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adrenalinemassage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adrenalinemassage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df3182a7-5609-52e6-a6f0-d59d3a0076f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adresolutionsupportdesk.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adresolutionsupportdesk.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bc2c22b-013b-5bcf-9ad1-23e3df3fbb7a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adresolutionsupportdhub.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adresolutionsupportdhub.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4db23b9c-f985-5023-a04e-146a095644b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adrevolutionpro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adrevolutionpro.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4c56e6-4dc0-536c-9f42-fb75c40d0bd6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adrianabellworth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adrianabellworth.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3060499-ca9d-5954-aa1e-10e234563144","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adrianaborrero.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adrianaborrero.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a00d88b-4390-5d45-9231-3bead2e0173d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adrianahealthsuite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adrianahealthsuite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be65256-6c3a-53d4-8710-5a3b454b1336","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adriaticoelectronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adriaticoelectronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2de785a2-7c38-5529-ac35-22cb2be13e4b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adrielsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adrielsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--004ef40d-a540-53f7-953b-99832ae96d09","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adriftstressful.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adriftstressful.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6697e197-16ac-55d4-a011-efb67b8a1c2a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ads-google.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ads-google.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3f8101e-fe43-58bc-aebe-80ea09f68a66","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ads-google.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ads-google.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2fd1285-aa18-53eb-8c9b-4a9872483c2f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ads-supportcenter.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ads-supportcenter.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ed4229c-f592-5671-a9c4-d5385b9aa256","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ads2africa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ads2africa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c53a9d2c-33b1-5d86-b4bc-8e25e70e14a6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adscan.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adscan.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b2e6876-d545-5c6b-94bd-166e1c12aa4a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adscentersupportcase.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adscentersupportcase.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6aa9c4a9-dae7-599b-8fd6-c9e2c00a6eac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adscentersupportcasefb.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adscentersupportcasefb.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0340c4b-f25b-5bae-9a9f-06f6dcdf95da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsdkbb.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsdkbb.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dfb6046-f74a-5f3b-9b9a-828ad43cc180","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsecure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d17a8d51-630b-5670-907e-529a61ee63cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsecure.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsecure.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--327be7a2-771f-590f-832e-fad5c0a36b9e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsenseconnect.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsenseconnect.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b63415a-1668-5b0d-b1ab-e580feee58fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsgogogo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsgogogo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a332dc2-de17-5b73-9ce5-431f29a550f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsgoogle.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsgoogle.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9382ce4f-142c-5223-9fab-1a78d77047b8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsgoogleshare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsgoogleshare.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6ffdc0a-4e77-58ac-92b4-886b11a3930e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsgooglestock.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsgooglestock.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3266696-0498-59a8-ae28-9799510a4385","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adshelpercenter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adshelpercenter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--303ec1bd-a9b8-5d7e-bd46-73f99898b591","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adshield.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adshield.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf96ac89-940e-5532-8a07-878f09240387","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsjdkbgs3.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsjdkbgs3.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee65be94-cc31-5e54-ad33-56ddf9cde01f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adslinkedinrecruiter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adslinkedinrecruiter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87027e42-070c-5d27-98fe-c36097923243","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsmockups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsmockups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--714dc029-2555-5763-82e4-fc81f999a353","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsnapchat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsnapchat.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96e7f8d6-4367-5797-982c-18817632e4bc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsnovas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsnovas.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8910173e-2429-5f39-a1aa-12bee2470f5a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsolavivo.mobi","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsolavivo.mobi']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--760415e2-f12f-5103-8ae4-8a734c8ab49c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adspulsee.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adspulsee.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9de6a30b-d6a9-53b8-ab77-dac26840037a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsrevlum.media","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsrevlum.media']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e2897e8-d3c2-5c7d-9dbd-97eabfec9958","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsring.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsring.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--709fbc6a-0537-56e9-876f-6faf94d111d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsrv.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsrv.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf181ff6-b5a6-56c3-925e-4805f50ec2d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adss-tradeforex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adss-tradeforex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6df87970-62a4-53da-865b-5650d604df9f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adssalespilot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adssalespilot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--327a7d0e-3a67-5353-9693-cf30d33ed776","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adssalespilot.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adssalespilot.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83ab08ae-3b5f-5f58-bb25-0521b4f21c37","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adssupportai.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adssupportai.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--396bcd31-c892-5265-8527-64bf2438c49b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adssupportnetwork.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adssupportnetwork.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8093f7be-7abd-5b0b-809c-0408bfc2dd5a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adstokenize01.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adstokenize01.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b98deff2-f01e-5b95-baae-57efe74b2920","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adstrust.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adstrust.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7041ee9-567b-5b59-913d-8a55131c3c8b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adstrustcenter.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adstrustcenter.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d4dd5dd-75de-5aed-93a5-2c8f7a671481","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adstrustdesk.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adstrustdesk.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c7c4952-94e6-5933-ae58-1d07159fa690","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adstrustfunds03.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adstrustfunds03.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c8298f7-dae0-5af3-9e76-36fcd7cd7fc5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsui.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsui.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b718d1f3-73f5-51f2-a919-545c2abd45f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsupportcentre.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsupportcentre.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab3062c6-6873-561d-876f-f98dc9ccfe38","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsupportnetwork.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsupportnetwork.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be6aba25-0185-5c6f-b135-3ebf870b84ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsupportnetworkcasefb.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsupportnetworkcasefb.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af57aa28-dec0-555b-83ec-ea91dc197b47","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsvericationsupportcarefb.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsvericationsupportcarefb.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64be62a0-6b87-564a-9bf4-3a98cc7182a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsvericationsupportcasefb.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsvericationsupportcasefb.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--356487b9-dffa-5583-9fb0-5f67ac34166d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adsweb3.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsweb3.network']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a8d6c2d-af97-590a-915b-ec4a71050ef6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adt2kucoin.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adt2kucoin.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f31c200-bcd9-5ccf-b481-f045cbf4084f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adtnamedicare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adtnamedicare.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2e384fb-07f7-5551-a1cb-4aa3e98cc3db","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adtrustbase.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adtrustbase.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbaff145-e766-58f3-a1e7-a706cf8f58a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adtrustcenterhub.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adtrustcenterhub.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48793025-1af8-5356-a46f-2d535b02992b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adulingtonbasecos.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adulingtonbasecos.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2fd0db2-e23e-5f42-80ee-747f0dccb8ef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adult-hookups.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adult-hookups.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e759d569-a845-554d-84e3-67fd4bb823ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adult-tiktok.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adult-tiktok.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5134198-f9c4-50a5-b057-78960618094d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adultapple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adultapple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6e2669e-dbad-54f4-8f9c-2673f3b96ce9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adultautismgroupsc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adultautismgroupsc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26bfd894-93ee-584c-a92c-b516d381192d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adultbestbuys.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adultbestbuys.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3767a7d6-4044-576e-a3af-9935340db085","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adultbestbuys.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adultbestbuys.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a32c586-3d98-57d0-9011-de3655efc0c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adultcallcenter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adultcallcenter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e68f42c3-8b05-5e6d-881a-03a2e7e57ab7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adultcannabis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adultcannabis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48c0e8d6-b288-51b9-adf9-3f9027767b1b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adultempirs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adultempirs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf20f437-ab4f-5688-8195-0d1a716db884","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adultgamesvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adultgamesvault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de829649-18d7-58cf-9638-c91e491104cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adultlinkedin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adultlinkedin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec510bb2-0fe0-5ccb-99b8-49df82c89da6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adultmenswellnessae.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adultmenswellnessae.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--159187db-d1b2-5596-b355-1fcfe68fb8ba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adultmoviedatabase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adultmoviedatabase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--295abfe1-8617-5cc9-900d-dd0ca3da0287","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adultsbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adultsbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee46bbc1-0880-525f-ac50-70b155f64e88","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adultsconnects.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adultsconnects.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47369ed9-77cc-592d-bd25-040784b357a1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adultsjuniorfling.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adultsjuniorfling.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afafdc94-7588-54b5-804d-060768b5f720","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adultstiktok.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adultstiktok.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2155e54a-6c64-5c28-a57e-706833d4920b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adultswingconnection.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adultswingconnection.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a73cdbc-abc7-5512-b72d-6d02851f7129","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adulttiktok.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adulttiktok.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28bb319c-e0a0-5799-9565-9062a63df900","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adupside.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adupside.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ac771ad-abd0-5cf3-a313-62ba8995ec24","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adussa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adussa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74600bf9-b449-57fb-8c80-436c11d1bab3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advairservicesinc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advairservicesinc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c18bd67-c351-537c-8394-4c84d63fb707","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advance-centrelink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advance-centrelink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf4e1943-9f51-5c61-b790-a7caa5fc0573","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advance-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advance-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1ca73a6-fc48-52d5-bd9b-d6c32f27127d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advanced-secured-privacy-trusted.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advanced-secured-privacy-trusted.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08cb35c3-af25-5f51-b729-e53b64b0275d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedaccurateshieldsecure.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedaccurateshieldsecure.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64565ce0-8f10-532b-9e3e-2e3dff41ffd6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedairservicesinc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedairservicesinc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1054c9e9-6791-5aed-932b-65f80a26feb2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedairsvc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedairsvc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd358b1c-8941-5510-9628-fc5a10b08baa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedbased.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedbased.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08917d8d-1342-5be0-a213-c3fbb5f077cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedbrainvitalitysupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedbrainvitalitysupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d109261-3fdf-5cca-ad43-e5e6e3f07d5c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedbybit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedbybit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32ca2687-ef4c-5372-b8db-cb5eb4f7fc4e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedcrypto.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedcrypto.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0640e94-6763-5eb2-96d2-dbe693e5b35e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedcrypto.tax","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedcrypto.tax']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae721fe4-a96b-5fd7-a45e-4454e94d7ad4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedcryptocurrencytrading.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedcryptocurrencytrading.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c328e844-e0c6-542e-9d77-54242d5d27d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedcryptotax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedcryptotax.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02582c77-ffb0-5991-89b7-7bb6e68dd96b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedcybersecureaccessed.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedcybersecureaccessed.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90a7aba8-f344-581b-a716-86fce420209f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedfastcybersecure.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedfastcybersecure.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--077e652d-1479-555c-beb8-12317fc6b8b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedguardlightweightsecure.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedguardlightweightsecure.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d4be028-c407-5356-80c9-cbc301393a8b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedguardsecureoptimized.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedguardsecureoptimized.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98c2129e-78ad-5b9e-b400-e91889370d14","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedhealthyslimsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedhealthyslimsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d09df5be-01ec-5398-a9e0-3056895d5289","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedlightweightcybersecure.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedlightweightcybersecure.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42be71f4-2860-5e4a-93a5-1d1482f4eea1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedmailsuite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedmailsuite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79f1e43d-27c2-5140-8820-55120f187660","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedmatting.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedmatting.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cea9ed4-9ac4-5bc9-a8cf-348e42d5e4c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedmattress.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedmattress.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd7a6d33-39d9-52bb-aa8d-c75c4cf42d45","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedmenswellnessaq.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedmenswellnessaq.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5645379-0756-5486-b255-e1e31e0fb0e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedmovesupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedmovesupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54d00b48-2387-5fe3-96d9-56e2e15deeb2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedpetfirstaid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedpetfirstaid.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--671261a0-8093-5a03-9cf4-ea2028ff78c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedportal-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedportal-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--808a6784-247c-5556-8ac2-33037f10752e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedreliableaccuratesecure.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedreliableaccuratesecure.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3162807c-5dfa-5a39-8dab-0ae94cdbb42c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedreliablesecurelightweight.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedreliablesecurelightweight.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbeb6cc6-e43e-527f-a534-362a59470dcf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedsecuredprivacytrusted.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedsecuredprivacytrusted.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95d297d4-aedc-5213-9c1d-10c0a1de9284","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedsecurity-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedsecurity-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67c35e5f-d6bd-5e2b-9f5a-b0cab06a8ca0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedsupport.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedsupport.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eb9df81-bb08-5f88-908c-fc103dbe75cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedsupportonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedsupportonline.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42aba921-52b9-5fce-b8b3-d2c0b317f5ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedthermalmassage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedthermalmassage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dda47dbd-863d-502c-b8dc-46b5f7bbb69a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedtrustwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedtrustwallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7b28bcf-1db2-5cb9-9d1f-62b37895515b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancedupdatesforbusinessmanagement.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedupdatesforbusinessmanagement.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f10234c-db6f-51cb-836f-176ed4bccd41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancehsbc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancehsbc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8d24b26-f969-5a41-bf23-c1b155bd3913","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancenervesupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancenervesupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89758ab2-0ea8-56fb-868f-f7a12d5602a3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancets.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancets.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8d2f32f-46f4-57e9-91e6-6f83f3fbec83","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advancled-ip-scanner.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancled-ip-scanner.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1fcb11e-770d-5830-b1fd-1d6862185276","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advantageautorepairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advantageautorepairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eff066e0-8b92-5ff3-a41a-8a071764d2f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advantagepestnorcal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advantagepestnorcal.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95777cac-2f6f-5df4-94bc-679fed017a55","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advantaweb3.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advantaweb3.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e750f30d-ad4d-5a16-932b-4c082c2219c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advanzia-konto-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advanzia-konto-app.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--280ae799-ad78-5ca6-b71f-6d197ff94f34","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advanziagestion.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advanziagestion.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6172b117-7c9a-5784-ab76-ef0e2fe0bf83","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advanzsafety.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advanzsafety.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ab75a9c-0df9-5150-8c76-4f9bdfcc0f88","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advaultsoftware.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advaultsoftware.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c813fa3b-e40e-5f85-b542-b881123684b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advavabasebridge.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advavabasebridge.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ca29c08-03aa-5a97-9691-9cdfe3e1f151","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adventistmessage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adventistmessage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73b345c9-e1ac-5c57-9761-8688b318185e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adventure-celestial-196.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adventure-celestial-196.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce3d4a7c-6469-5a1e-bbe0-10240e596381","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adventureactivities.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adventureactivities.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d66259-913d-5822-a383-c240b32bfdc0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adventurecups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adventurecups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e446b98c-d44b-53bb-bacb-19e9e1de9ddb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adventuregamesupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adventuregamesupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47204ad0-cf09-514e-92dc-3f9d30f38b88","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adventuresintreasurelandfarm.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adventuresintreasurelandfarm.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9b8ffac-1abd-5f58-8362-00be754a22fe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adventureswithcarissa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adventureswithcarissa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48370410-cdd6-51c1-931f-698d8ff5cec8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adventurous-cassava.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adventurous-cassava.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--643fbb8d-2032-5c3f-b790-72b7126aacc1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adverificationsupport.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adverificationsupport.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29494db4-c2bb-531a-8ae4-8f6ac1e5865c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advertise-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertise-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d086c9b-94f4-5cad-8bb6-292597d11b98","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advertisemintcareers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertisemintcareers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf7d5884-dfea-5ef6-a1a4-5dd88b428fef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advertisemybusinesslocally.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertisemybusinesslocally.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--875b458f-453d-5bf3-bbba-5d13ba098f3c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advertising-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertising-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e84bfddd-74e4-55cb-9c16-96ea76ee132c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advertising-matters.surf","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertising-matters.surf']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be73c0eb-1e62-56c1-9672-b435d1dcc803","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advertisingaccountsecure.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertisingaccountsecure.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2c3d8ba-2113-566c-b3b9-594a2e930898","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advertisingvalue.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertisingvalue.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba8a2485-b51d-5777-b33c-5ef17a2e9a56","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advertjunction.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertjunction.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--021d25e4-8bc4-522c-ac8d-574ec8b1f42f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advertronis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertronis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4c276f8-941c-5dfd-bba3-30cd904ebdbc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adverwise.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adverwise.today']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e75d5a78-6ef6-5977-b719-329b9cb814a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advetabase.best","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advetabase.best']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a4150f5-d7c1-547d-82ad-a4710a2ebfb3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advicefarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advicefarm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--529140d1-797f-5aee-91a6-3137061a28e1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advicesupporthelp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advicesupporthelp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6cb651d-575b-5431-bb98-39f7b6a43aeb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adviceswise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adviceswise.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a8aa111-76b7-567f-9c8c-e686cdaf97ad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advicetrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advicetrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0852a0d7-6c52-53ef-808c-d9015d050b6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advisalgeadephagahaemanthusdroituralthaliacealirat.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advisalgeadephagahaemanthusdroituralthaliacealirat.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aefcc38-d67d-5a31-bf09-6bdeb27bde66","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advisatory.motorcycles","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advisatory.motorcycles']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6dc5f6a-8af9-5833-a222-0e8359a026ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adviscoach.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adviscoach.digital']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a53d8956-89d6-53e1-9518-e187c1c3dbfb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advisedlyremove.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advisedlyremove.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0088acdd-09b4-5d69-883f-563d5476e3bc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advisersbitcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advisersbitcoin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7e44079-91a7-5ff6-9e89-71e2b696f2ad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advising-support.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advising-support.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9004722d-8374-553a-970a-5212d674542a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advisor-trustwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advisor-trustwallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab3716f4-d2f9-5008-95d9-9f7081439449","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advisorcap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advisorcap.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a94cfe0d-0616-5715-ba0f-7f6bdc2abbc9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advisorfinanza.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advisorfinanza.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--571bdf8b-c547-5735-96a8-5260861abba5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advisors-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advisors-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b111a8af-a549-5f66-a54c-b200cfe62486","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advisory-suite.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advisory-suite.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb802638-cd06-53e1-a5b6-fcd9c45ef327","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advivabase.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advivabase.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c56d0303-dae6-5eba-aec9-6e99805d655e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advlaber.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advlaber.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0201045-0a1b-5af0-bcd5-8bbf3da4dadb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advlang.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advlang.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28ec568f-94cc-5030-aade-5f8320ae1795","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advmohsinabaidullah.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advmohsinabaidullah.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6332c41e-e220-5b50-bf57-49a1626beeb9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advocaatfamilierechtgroningen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advocaatfamilierechtgroningen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0113a28e-dd33-5ae1-a11c-86d286d1a120","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advocatefirstes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advocatefirstes.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9065a583-6e62-5a4b-9121-52f3e45236b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advokat-novisad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advokat-novisad.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e102f8a8-c8e6-5daa-b825-8620d1af3a94","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advokatnovisad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advokatnovisad.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2fd7d6d-14be-5af7-bdc4-e95f0281f5fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advokatt.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advokatt.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d2b3e37-5fbe-5787-af0c-8ee658081103","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: advosocatt.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advosocatt.biz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49dad4be-f741-5cac-ba98-8fc19cd3f401","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adwally.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adwally.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bd6f8b2-5f12-5c81-877c-d876376705b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adwalte.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adwalte.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fa6c208-c97a-5b2e-9354-4a809858bc86","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adwiseconsulting.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adwiseconsulting.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91e0bf50-0cb5-58e9-960a-1ab8c2562862","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adwisemarketing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adwisemarketing.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d54057f-dfb3-54f1-a24b-ba80b298a0cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adwisenow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adwisenow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c97a7ee-46c6-5afa-a4e1-da2994d46e79","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adwordsaccessads.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adwordsaccessads.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2db179f-4c20-5e67-a961-05f5e672cc4b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adxnow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adxnow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6ed4df0-de38-5923-b8b9-eae473d87140","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adxscope.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adxscope.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0508cd7-2fbe-5a9c-9015-2e6d7efa2e4b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: adzrifinallyfoundila.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adzrifinallyfoundila.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--121437fd-59c7-503d-88c3-61334250888e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aeallys19l.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeallys19l.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fab8ba4-d830-563f-a310-aa2a41eda11b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aeanzps-dush-oss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeanzps-dush-oss.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfe6f5ef-6ec6-583d-9312-6b56ec15df3a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aeatnamedicare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeatnamedicare.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d09765e8-3060-5882-88fc-14f17de46f10","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aecom-groupsmtp.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aecom-groupsmtp.one']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dca03754-1739-5059-99a3-d610344aa52d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aecorcapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aecorcapital.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6a46489-8348-55a7-bcc7-0c1fb62cecee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aecorcapital.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aecorcapital.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82fb23ad-a192-5077-8c74-69cd65d97c78","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aeg-airsoft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeg-airsoft.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56de5533-e73d-5e61-ad7c-955614be1143","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aegirs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aegirs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dff5e6d-e316-5dd4-8c7f-55df8d3df779","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aegissafe.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aegissafe.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8265ca09-cfb2-54af-9cb4-6d1320390294","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aegissafe.store","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aegissafe.store']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35ced786-b695-5039-9b5c-830d8b4f58f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aegisupdate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aegisupdate.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9de5496-ef12-5a97-aa6f-92cc4b90c702","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aegisvaults.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aegisvaults.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d2b3d2-e699-5a9f-98d8-d697d261a957","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aehigroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aehigroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fea3e29-1821-5103-9008-d85e806f200b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aehsbc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aehsbc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76b1c1fa-f0dd-5f8b-ae60-77bf943f2ab7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aeicloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeicloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aefd824-66e5-5f78-99c0-5dc5d8e7e7b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aeirs.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeirs.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f8e0bef-891c-58e0-9baf-527b33cd5325","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aentamedicarevision.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aentamedicarevision.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ecbe2b-fb82-5871-8e0b-3152e6e6f456","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aentmedicare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aentmedicare.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d52f82fa-757e-5468-8fcb-120a5664e7cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aentnamedicare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aentnamedicare.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8da7b6f-1125-57ff-991a-360c6d3cf207","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aeorlatte.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeorlatte.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--603e19d1-5a85-52ac-9cbf-e9ac31222c0c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aereaselatans.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aereaselatans.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1b0163a-a81b-5e54-a324-7b01516befd3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aerialbridgeinspect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerialbridgeinspect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afd20145-866d-50db-b3b2-06e9193b234c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aerialsecuritysupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerialsecuritysupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--388948d7-9203-5cc5-9198-4c98b074d33f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aerlineas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerlineas.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f9942a5-d89a-51c3-9a1e-becb06e618ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aernetflix.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aernetflix.top']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--090e5a83-37a7-56a3-9c5e-91aa98885c32","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aerobasemodels.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerobasemodels.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35efcb96-b3e9-572e-9939-7f798e82b1ff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aerobridgelog.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerobridgelog.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d78885d0-1a0f-5627-ab75-8b500c1244d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aerocannabis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerocannabis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ea8f144-d1ad-5a98-b07c-5d527a5e9cbf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aeroclimabase.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeroclimabase.digital']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ab81b28-9979-521e-9b6e-8794f6b3d586","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aerodatabase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodatabase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3973935b-aa80-5887-96cd-d622dde11e9f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aeroinsuify.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeroinsuify.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--852e4b7d-1279-5575-a064-d74312535b3e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aerolineas-pqzvrna.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerolineas-pqzvrna.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a6ac360-a5a3-544f-a416-1270b188244a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aeropressussale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeropressussale.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7298738c-61e8-5d73-a628-64ad6a1e14ed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aerosbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerosbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439a46b3-a03e-5dec-b1ac-b718600061d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aerospaceconnectors.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerospaceconnectors.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77d89737-6fd4-5055-9383-62567e1e0bca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aerotoken.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerotoken.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf0bd478-9afb-5c7c-bd5e-57dfb50fbbfe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aerotrustlogistic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerotrustlogistic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9734b10-1a46-52f1-b7cd-7a86f72ad01b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aeroventron.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeroventron.biz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faad5241-d89d-5081-ae64-75a6e71db8bc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aespecialstore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aespecialstore.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99363234-45fc-5214-ac2e-c61b39882b6a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aesthetesnftnewsletter.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aesthetesnftnewsletter.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a40282f3-6043-5d18-987c-7ee31c996820","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aesthetically.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aesthetically.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f4ff1f7-0228-5ce1-b57a-08077bdba397","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aestheticwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aestheticwallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff1d1da1-0fdb-537f-90d2-9fb86d43445d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aesthtoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aesthtoken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adfab83e-ebd3-5f82-abc7-56d239233445","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aesthtokens.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aesthtokens.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfa264c0-7dfd-54ad-bb2c-500576108b2e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aesthvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aesthvault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a72f6426-c416-5ec3-812e-0d98ee494dfa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethenahealth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethenahealth.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--593a05c6-84b9-5193-bd4f-4a44298c716e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aetherbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetherbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28981246-3c60-5b6c-bede-914e88b9903f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aetherminto.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetherminto.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2b4d3fc-7be1-55a4-94fc-3dbe5622080d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethertrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethertrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc81483d-f9d7-51f7-9985-aec7d369b895","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethertrust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethertrust.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0c9a88d-4567-5b72-94e6-0dcff4ff548f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethervaults.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethervaults.cloud']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cb589ef-a900-5df8-ab68-6007f4765b29","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethirscloud.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethirscloud.network']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b93ca95-7804-53ce-8477-a77e7692b0ba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethra-commerce-bridge.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethra-commerce-bridge.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--683dfe8f-b7a0-5818-8a97-dbf423325ba6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethra-commerce-bridge.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethra-commerce-bridge.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71f73d6d-5c4b-5250-a3b9-19fd801859eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethra-merchant-bridge.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethra-merchant-bridge.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cdbda98-cd6a-599a-85c6-7b3f12dbd1eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethra-purchase-sphere.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethra-purchase-sphere.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c5223f1-d013-56bc-9e0e-76ea61ed2ea4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethracommercebridgebank.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethracommercebridgebank.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ce75a5f-529f-5388-b4f1-a7064d46580f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethracommercebridgepartners.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethracommercebridgepartners.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7215c0b6-f9a0-5406-b4ba-2147048dea64","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethracommercebridges.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethracommercebridges.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de427fe0-10c8-5c16-9b74-97f37f9b4a04","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethracommercebridges.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethracommercebridges.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad955fd6-334d-5a96-851c-e4e4334335ea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethracommercebridges.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethracommercebridges.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58651a10-d87a-5ac6-b0c2-b4d8e4db80e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethracommercebridges.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethracommercebridges.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--372abdaa-5948-56ea-aa82-776e12c7e556","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethramerchantbridges.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethramerchantbridges.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--751ca9a9-0caa-5524-9da6-97225e2e863c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethramerchantbridges.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethramerchantbridges.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca5d5d05-a693-5ba1-befb-b99e76188113","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethramerchantbridges.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethramerchantbridges.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af340dd3-346c-51b2-81b5-04cd905baace","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethrapurchasespheremarketing.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethrapurchasespheremarketing.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba7f2cd6-bf56-522c-b4a4-6f8b4c730a66","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethrapurchasespheremarketing.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethrapurchasespheremarketing.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--def492cc-7534-5f82-9f67-ed39f2c3af27","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethrapurchasespheremarketing.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethrapurchasespheremarketing.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--916814af-fa3c-5b59-b681-beb2abef0bab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethrapurchasespheremarketing.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethrapurchasespheremarketing.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7952797e-708f-561a-937f-33b6c00ca6c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethraretailconnectdirect.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethraretailconnectdirect.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08fd69e3-7d20-540c-a23e-ed4c79e8b7d3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethraretailconnects.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethraretailconnects.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5be53899-8f8d-57e4-97c9-0b7038902744","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethraretailconnects.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethraretailconnects.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef9afe92-cfcd-5900-b459-2fef5fc3705c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethraretailreconnect.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethraretailreconnect.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b46dff51-31ef-5ba3-8128-3fb884ca5d4f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethraretailreconnect.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethraretailreconnect.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13ee1be4-0696-55ff-b549-854c157bb4f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethraretailreconnect.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethraretailreconnect.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ee46e77-da61-53c7-9a93-172ff59aef6c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aethraretailreconnect.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethraretailreconnect.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb553af9-fde5-51cb-b60c-49758ca10c8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aetna-medicare-advantage-plans-2025.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetna-medicare-advantage-plans-2025.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2757b50-3e6b-5e59-836f-e93423b66c3a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aetna-medicare-advantage-plans.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetna-medicare-advantage-plans.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6081745b-e3f5-55fc-b6d0-dd14575e21bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aetna-medicare-advantage.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetna-medicare-advantage.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f25d343-3ca2-5cfb-ab23-336bcac15823","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aetna-medicare-advantage.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetna-medicare-advantage.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82c70778-e3f6-544f-9c15-5c33e7c1fdb4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aetna-medicare-login.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetna-medicare-login.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3851addb-5e98-553c-bca3-b118765ae500","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aetna-medicare-login.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetna-medicare-login.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64b9647a-7bbd-5c72-8c02-4e96ea142e67","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aetna-medicare.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetna-medicare.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edcd0949-af6d-5c15-a599-92ecb6b72205","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aetna-medicare.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetna-medicare.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a6b510b-164b-5559-b0a5-e5b747c1c2f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aetnabetterheslth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetnabetterheslth.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20c2f126-d2a0-5d8b-8d80-4c5b9be7ef89","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aetnabetterhralth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetnabetterhralth.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56e62c69-e239-52dd-82b6-77d4536bd164","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aetnamedicarevission.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetnamedicarevission.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f1d063b-2acd-5d5a-8293-b4e54b2b9ec6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aetnanmedicare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetnanmedicare.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98b150cc-995f-5bdf-8385-67f6bbaf7e3f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aetosforex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetosforex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16320c0f-b189-57b0-a76f-12f1b272478a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afaconnect.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afaconnect.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47e75bb1-893f-5e13-bddf-d18eea76008c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afaqgroups.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afaqgroups.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3323e85-339b-550c-a296-981b21f23d9d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afattah.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afattah.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b15585aa-0f6b-5f10-a433-4547dafb5db6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afbmoonmall.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afbmoonmall.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb4ea4de-dab2-5f01-bafe-c2ad0871dcdd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afbrepairsllc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afbrepairsllc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--201f8942-b825-5b40-8bf2-9210bcc6dcfb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afbridgetown.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afbridgetown.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03928944-eb86-535c-809b-a6dffc7c1850","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afcasupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afcasupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eae6236-aa17-5701-87be-3e54791a30d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afccsupport.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afccsupport.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94565839-7aee-53a0-bb54-993dce037f57","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afcloudmining.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afcloudmining.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be50b88b-b01c-57d2-8093-878801014b27","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afcsosupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afcsosupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17f2f8a7-2b1e-5943-9f49-17aa0353ea75","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afdelingbetaal-vattenfall.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afdelingbetaal-vattenfall.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b497d3d-f175-5ac6-86b7-5825c017fbce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afdkbv.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afdkbv.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ecc6a36-9b8c-5d58-9b53-2888e79c0b8f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afdups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afdups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0af774f8-7092-5a6d-8f9b-cd589140ef44","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aff-tanzcloud.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aff-tanzcloud.top']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98809514-fd62-5e56-ad7f-c49b9b609da5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affairs4you.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affairs4you.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68f5d465-6b94-5959-a63d-50bdb27234f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affairsforum.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affairsforum.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2465e07b-7df3-5858-8171-bab12accc88d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affairshop.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affairshop.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcf4af73-1b65-573a-aea2-5a88fba63c3a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affairslocal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affairslocal.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81193d1c-2f52-557c-a6ec-527f0fc2e173","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affairslove.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affairslove.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0ca3793-42ab-52be-8909-4bba0fc415fb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affairsnearby.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affairsnearby.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa379250-6c6f-584c-a86c-4a714bb793c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affairstoremembers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affairstoremembers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f549a0fc-23b8-53f9-8f6a-70c6c51f0b6e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affairsunlimited.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affairsunlimited.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ed98781-e94f-5351-820f-6d3ac1875771","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affectionateanimalattention.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affectionateanimalattention.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7728d68a-d6dd-54b3-9ef3-0c42140bee4b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affertvpapple.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affertvpapple.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f8422de-b5af-5ef5-ab05-86ea549e3ad9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affidavitletterofsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affidavitletterofsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f8f1dc4-f6d7-5d3d-a979-e2b473627709","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affiliate-cosmospin.casino","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliate-cosmospin.casino']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ed3c7ff-85ee-5481-baaa-8e9924537e60","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affiliatebonanza.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliatebonanza.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d13787aa-428b-55fb-8926-7b1a4f3abd33","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affiliateconnect.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliateconnect.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5342f30f-2811-5014-b3e6-825792776d37","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affiliateprogramsdatabase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliateprogramsdatabase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe12d91a-798c-5604-b0cb-ee23c3e798de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affiliatepromovault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliatepromovault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ef61e05-315c-50d3-a867-47576390bbf9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affiliateronin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliateronin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bf98a62-76c4-5fb4-9dfb-6433255cbe08","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affiliatesinabox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliatesinabox.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0b842fc-cd8f-50e4-9f42-9bd3605f56e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affiliatetransfer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliatetransfer.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f6f0cb2-16a8-53f3-a488-9f71a28937af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affiliatevisa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliatevisa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fd0ea6a-57d8-5211-9b95-08fcecb1ffa2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affirmationsprizevault.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affirmationsprizevault.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c640ed1-12f4-5628-b808-4ab2c3023ab5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affirmativeattitude.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affirmativeattitude.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2d1cbf3-28cd-55c7-a2a6-cdb6c793cbb2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affordable-connectivity-program.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affordable-connectivity-program.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a373c938-3e0a-5834-9ec3-82aba48104be","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affordable-connectivity-program.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affordable-connectivity-program.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cab5f2d0-958b-5908-bd3e-f84220a53b0e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affordabledentiststockbridgega.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affordabledentiststockbridgega.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8ff9889-a0e4-5ac7-a08b-8891397ef7cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affordablekrakensocials.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affordablekrakensocials.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebfec705-4971-546f-b275-812f95afb00b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affordablemedicaid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affordablemedicaid.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75c70020-05a0-57e9-a8ba-7c749170e56f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affordablemedicare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affordablemedicare.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28667463-767b-5270-b203-f327bab629c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affordablemoverssanfrancisco.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affordablemoverssanfrancisco.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aed299e5-a431-5481-b5c3-32d09847aacb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afforsecurecode.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afforsecurecode.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e556f8c-97c3-58c9-ac2d-441d8cbb698b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: affxc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affxc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6ae37d1-829e-5917-be03-590178ce40db","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afhcupsllrx.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afhcupsllrx.digital']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdacf79b-3b0e-5000-9fc7-70aaa40b8430","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afhtoken.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afhtoken.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1b4f510-c26b-5028-bf8b-9aa5b410efc7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afianzamiento.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afianzamiento.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9efe1961-91e3-58b3-b5fe-8c5c43714f29","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afianzon.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afianzon.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45cef5af-ec5b-575f-9e92-143f0a7f82f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afirsta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afirsta.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77f8b6d9-b159-514c-a1ca-31dc9c41fb79","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afirstavip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afirstavip.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ee01587-5fe8-519c-af29-dcc50a686de5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afirstcall.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afirstcall.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc82abda-ea6a-5712-9ef6-f330bba483fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afirstsolutions.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afirstsolutions.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a62e625-3886-51fe-b124-cd038ba2210c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afitclubarganzuela.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afitclubarganzuela.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9a270a3-f240-5d5b-826d-fb908e4b515c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afnextrustfirm.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afnextrustfirm.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5087df23-6e0f-5705-a87c-f4f02db3d2b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afodabofarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afodabofarm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--839504b6-fbdf-5d85-833c-19c12f8c41e2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afraidsecurepay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afraidsecurepay.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d05e962-80db-5ddb-bff6-d48ad5356a81","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afraidsecurepaygt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afraidsecurepaygt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e016b9e-8de7-5dbe-afd0-fcb02b65537e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afribaseagencylimited.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afribaseagencylimited.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2366fb88-2c7f-51ca-92c5-fdad0b67dc01","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afribaselogistics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afribaselogistics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6f6004f-0ab3-5241-a467-cad5511c48ad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africa-badminton.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africa-badminton.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da222c9c-5cd6-5786-82e5-6ff790f363d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africaboundariessafaris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africaboundariessafaris.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5910d95-6d55-521c-a4f7-df56d4ba14e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africabusinessconnectnetwork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africabusinessconnectnetwork.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a97f634-daac-528f-90f0-508192efe6c4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africaconnectseries.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africaconnectseries.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b3e01ed-a42e-5a82-8106-ad8c8e84b6ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africacontemporaryfarming.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africacontemporaryfarming.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b438503-2535-5827-bc17-b41af3d01476","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africadatabase.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africadatabase.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2016f910-3a75-516e-97fa-840445db2aef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africadiasporacitiessummit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africadiasporacitiessummit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3bd344f-9d43-52e8-a3f2-b9fe9d649604","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africafootballersconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africafootballersconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f8782f3-6c82-5023-aa01-dfd8845c24d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africafruitconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africafruitconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44981ae3-d159-5b7e-8926-5f8b70d5a49e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africafuturecities.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africafuturecities.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bb6c6fc-f083-5eb4-adf2-c4bde7f37119","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africafuturecitiessummit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africafuturecitiessummit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd45e7a0-c2ad-5081-aff5-034281de3dc1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africaiomint.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africaiomint.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7fa5d90-88d7-5988-8ccc-89618cd20f05","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africamarineclaims.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africamarineclaims.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75446a4d-fb0b-5e02-8594-37558b0935f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africanabuse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africanabuse.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--655a1106-10ba-5d1a-98e2-f86626a2b045","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africanally.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africanally.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b825e114-5ccd-59b9-b129-6494e5243927","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africanapple.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africanapple.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e1b8a6f-a13b-5d64-8288-57ad8ccfd58d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africanaupairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africanaupairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c38e04a5-850f-5954-b617-9cc19ebcd40d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africanbusinessconnections.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africanbusinessconnections.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e30ccaf-bceb-5d53-8566-1e072d9978d3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africancarbontrust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africancarbontrust.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2db8a136-46c2-56f5-9d50-445653a6e00a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africancitizen.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africancitizen.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb016476-12b0-54b1-bbb4-3ab13119126f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africanconnectionband.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africanconnectionband.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c99d4ae-df20-501c-93d0-1f64294d2598","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africanfarmersstories.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africanfarmersstories.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db249bce-298b-50f3-b1a4-5556068f0751","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africanfarms.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africanfarms.biz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdcba2d5-e821-59d5-876d-be60f128d772","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africanft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africanft.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb864103-7e01-5421-a585-f57052c26244","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africanoutlookonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africanoutlookonline.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d301e5e-13f6-558d-9e2e-1eeb265e9aa5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africantrustfund.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africantrustfund.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--759b7061-14d2-5f16-b0f0-1993ae55e813","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africanwattlesafaris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africanwattlesafaris.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e04aeb4b-ed07-5051-8626-0169eb98b88a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africascampusbattle.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africascampusbattle.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d453b512-2667-5cd7-ab9b-1943d35a08fb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africaweb3.academy","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africaweb3.academy']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7251a243-8bdd-5e70-90be-54886ef83145","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africayouthbridge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africayouthbridge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8716d1d3-6a21-5cad-a8b0-b79129ce8c31","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africonnect-exchange.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africonnect-exchange.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cc8a15d-ddbc-5394-a730-3a0342e0b5d2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: africonnecttv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africonnecttv.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d72e07a-f04c-5966-bd09-7d22fe982d53","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afriforexis.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afriforexis.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acb087b7-eb99-5f8f-935e-248fd83b8ae7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afriforexmedia.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afriforexmedia.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a0b0b9a-0f3d-52b5-97e2-f3a835662c65","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afrikabusinessconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afrikabusinessconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9715c993-648c-5108-9f8d-eb26d40e221c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afriktrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afriktrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3be7b3b-c3ff-5015-a493-b38b249ad2a9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afrilandsfirst.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afrilandsfirst.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd0f5d2-8089-5715-a312-7752b45740e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afripo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afripo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86ffa24c-b577-58fc-8df5-4b4dbb38994d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afrisportconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afrisportconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85a564bf-ef11-5e5b-9e63-df89fae0bc5b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afrisustainability.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afrisustainability.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a952f8f7-d26f-5044-bd2a-fceb0d2c437a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afritrialsconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afritrialsconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--237c8b8b-17b6-54f9-9527-0559eb05d2b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afriwell-groups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afriwell-groups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c17f4a34-fa7d-571d-83c0-7ba6ebed4466","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afro-wallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afro-wallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f3ff349-d806-54ba-9489-3bddcf483b06","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afroattack.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afroattack.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1ca43c2-5ff8-51f7-afbc-c014d8b091cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afrocaribeconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afrocaribeconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e829962-6264-5133-898b-392cfbfe3ee3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afromaelectronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afromaelectronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32b2caf8-080a-5ba2-b39f-6d274f8f8912","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afrosupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afrosupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fec2f0d9-7003-5630-9413-1ccc44223fed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afterhourshobby.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afterhourshobby.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de30bc12-8f5d-5471-8e05-3ec0f2f89dbe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afterloveconnections.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afterloveconnections.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a37eaa5-a372-587b-96e5-2f8127c661e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aftertoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aftertoken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b86e0b5-df26-52a0-b062-0a638ab3b573","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afterwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afterwallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9783b6dc-a4c2-5d65-8489-dcea4957ed38","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aftoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aftoken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e56e86ef-0802-541d-a806-5902075c9240","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afxgroups.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afxgroups.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6acd0e-41b7-59b0-b6a2-5528d8a36a2e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afxtoken.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afxtoken.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7fa09ff-244c-524c-8c41-6948f1b2e748","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afyacharitabletrust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afyacharitabletrust.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--350099d6-bed4-5b48-9cf2-09107a4f423e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afyaclaims.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afyaclaims.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1ea3858-2b89-5292-80c9-33c7204bccf9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afyafirst.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afyafirst.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd5d08b1-26db-5c03-9d30-ace6e666a43d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afyasuresuite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afyasuresuite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a97bbb6d-39e8-5f53-8602-81ed5cd62b55","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afzalhossainbd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afzalhossainbd.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e076647b-1022-5bd8-8efb-7a3b8534ee4b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: afzoneh-nevis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afzoneh-nevis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06b4997c-99e9-5a8b-91b4-341269f31738","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ag-claim.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-claim.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7555201a-023d-5bb7-b119-290dcee7fe09","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ag-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ff53143-1813-5664-9a0f-47017b94a2d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ag-tronlc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-tronlc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98e59c62-da5b-5d88-8ffe-229b3e2c3aa1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agabogadoslorca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agabogadoslorca.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9939152c-a0d4-5f7d-ad63-a51f33828b42","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agaburdabonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agaburdabonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42aa2736-6559-504c-8fd2-6cc7e73526e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agadirsightseeing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agadirsightseeing.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--770321c4-5fe6-5324-a64e-372614b65be8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agadirsmart.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agadirsmart.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78bd20be-4284-50f3-b7e8-8e93abcc7d46","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agadirsunriseballoon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agadirsunriseballoon.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f76c579d-20f6-5e01-8b98-4a155dbb9e03","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agamawallet.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agamawallet.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c524da2-0043-55d8-95cc-f80f5b0d70ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agamawallet.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agamawallet.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29a9654f-eaa8-5447-92c2-82aa74efe380","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agamemnon-horsebreedingfarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agamemnon-horsebreedingfarm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--923b382b-1a25-5eb6-a0c7-865f9f991e26","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aganzohk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aganzohk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f26f401-e598-5057-84e2-0c691a4eb2fc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agapaofarm.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agapaofarm.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23f70283-939b-51bd-8311-52c545de9498","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agapepregnancysupport.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agapepregnancysupport.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b020410-7b9c-54d0-ab6a-44e65d482327","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agattajoyeria.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agattajoyeria.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dc61ab3-35f9-5201-8cb8-f3ee697cd08a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agatthon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agatthon.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38ee5c81-5f5c-55f3-87dc-10e57e444c27","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agavefarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agavefarm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ada500f3-da28-59aa-b5a9-c1e111ae153e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agbistronyc.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agbistronyc.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--376ee423-0aeb-5160-b2e6-e297ae345174","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agbitcoinminer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agbitcoinminer.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2220a168-aa43-5803-b1fe-b089b625161e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agbitcoinminergroup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agbitcoinminergroup.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6f22b40-ab54-5305-bb65-1d8770d22e3c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agconnectministries.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agconnectministries.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9541e06c-b34b-54af-85b6-18a1880b7c15","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agconnectministries.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agconnectministries.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd34771f-effe-5e5e-a0e9-27d3cee24d19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agconnectministries.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agconnectministries.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e558e93e-7bd8-5412-b6e1-391198e6cb6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: age-of-ultron.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'age-of-ultron.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7668550f-4eb6-5245-bd8d-25f649fd375a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agebay.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agebay.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4e318c7-5c8d-5e07-8139-2e6a647be72f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agebay.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agebay.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69fe689e-ad7c-527b-b5d3-7cc8ae3987df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agebaydog.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agebaydog.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6058226-289d-5ac0-afee-6dd71e890333","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agebaydog.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agebaydog.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3742f3b-f33f-519a-95ae-2c42cf6f40b8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agebsupport.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agebsupport.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed2df7da-694a-5bb9-9579-3e8acd2b92bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agecsupport.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agecsupport.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0051568b-ca3f-592e-9ac4-14fe9750248d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agedgmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agedgmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d865b8a-8b79-5687-9660-0c7c70ed227e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ageingconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ageingconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7768394-b54e-527f-9c64-54e05cf9fffd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agelessabandon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agelessabandon.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--060ed21e-c746-54f8-a591-afac592433ed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agelessadvantage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agelessadvantage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abe3dd76-ec28-5de4-894b-c4218d44bfd8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agelessadvantage.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agelessadvantage.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12ada918-a1e5-5996-a5a9-d2519308fd79","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agelessadvocateszoom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agelessadvocateszoom.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ece43a8-fc98-55eb-b2ab-f668fe38ba37","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agelessai.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agelessai.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--937f4181-f8e5-514f-a0c6-19c1dd3ac5b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agelessaura.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agelessaura.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7da37006-bd9c-5b34-bd1c-72ea234ff18a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agelessauracare.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agelessauracare.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08facb6b-4f1a-5f06-865c-6f714579b869","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agelessaurahub.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agelessaurahub.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e44df75-60b3-5955-86c2-616df0b73473","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agelessauraplus.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agelessauraplus.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abdf85df-bfee-5984-a3e4-6b99fecc3037","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agelessauravita.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agelessauravita.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b07a1b8-c618-5efc-904f-bc10c2383416","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agelessgems.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agelessgems.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--773d1a2e-388d-50c3-b31a-80d63a2ec9fe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agelessloveconnections.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agelessloveconnections.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f33163a-54b4-5aba-9d5f-667791b6190f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agelessmanzone.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agelessmanzone.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f7a1649-8cc3-5438-8260-dc7be5c83e1e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agence-immobiliere-essaouira.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agence-immobiliere-essaouira.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58360b20-259f-5f74-ac70-f795f3fe3d93","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agence-pm-shopify1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agence-pm-shopify1.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df534f1c-9082-5834-a5ac-31ba9c5b1e95","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agenciadeviajessantamarta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agenciadeviajessantamarta.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8218106e-9cb7-528c-8ddc-0b2bc5f4d50b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agency-nft.website","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agency-nft.website']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d9abef-7b80-58b1-97ef-fcd85026102b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agency-supportcenter.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agency-supportcenter.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79607a7e-6921-5a05-989e-65999ae5efd6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agencyappealsupport.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agencyappealsupport.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--742a108e-6e14-5c36-98be-7c9f06b342bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agencycosmos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agencycosmos.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4106e197-ac31-5a52-baff-9793cd8cf229","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agencygrowthbridge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agencygrowthbridge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d51e2b45-5359-5699-8207-6b9d2ae10e21","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agencyinteractive.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agencyinteractive.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1e89e73-1691-5dd8-aad1-4600e1e7d78b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agencysupport.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agencysupport.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e89f8927-1b26-57f9-86e8-2605563bd1a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agent-apple.support","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agent-apple.support']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5565096-81fc-57e0-b2cc-2d220465c03f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agent-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agent-google.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18a7d448-6c99-52b4-9d73-a0621893b38e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agent4crypto.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agent4crypto.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f46d691-d2fd-5cbd-9b78-776f28323765","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentbase.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentbase.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc635d1d-2467-5678-bd12-8f5407bc1f71","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentbsupport.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentbsupport.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--435cff0c-1364-558a-ad4c-a5fb06055ace","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentclaims.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentclaims.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d143051d-93a3-52d3-be51-5c9fd5a3f30d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentebitcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentebitcoin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f4e4506-ec05-53e1-8f1d-d24167610f68","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentfarmingplan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentfarmingplan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4808b1bb-6023-51e4-9656-aa2e25f2d72c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentfarmingsimplified.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentfarmingsimplified.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5390927f-ab71-523e-847e-a36096ff9599","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentfarmingsolutions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentfarmingsolutions.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ac84f20-a7c9-5bfd-8742-a04caa74b26a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentfarmingsuccess.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentfarmingsuccess.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b77b6fdb-2f92-5f08-847c-c8317ca22e0d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentfarmingtools.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentfarmingtools.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09799d7d-32ee-5f34-9e87-ba6e85a828b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentically.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentically.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adbecba8-2c83-5938-9cfc-a7ff661ccabc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agenticwebmonitor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agenticwebmonitor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--055ee314-8aba-54c6-ac0d-1f69d968d7a3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agenticyoutuber.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agenticyoutuber.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ac9defe-1707-5483-b971-2e0b8e306503","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentio.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b2ba52b-165f-542f-8770-823acced0749","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentlabtrust.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentlabtrust.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d36b67-caad-5d01-ad3d-d221b66045bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentlawconnect.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentlawconnect.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66a0694e-ad8d-54cc-8a2e-9aba5a049f81","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentlawsupport.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentlawsupport.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d516b323-c10f-5998-9dd7-bfabcb6a2162","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentlawwise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentlawwise.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2342cc5b-1ae8-5fc4-80b5-d08140316610","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentlegalbridge.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentlegalbridge.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02202af2-c3c2-51d0-8d46-c29d32beb7bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentneutron.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentneutron.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffbeb5f7-8c81-5f22-9694-ec7715ebaf90","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentronium.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentronium.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--245e77b8-2eeb-5c15-ae14-90f7513a67df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agents-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agents-binance.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dff4c85-bd45-5b00-81e6-6a6b994d8849","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agents-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agents-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d595eda7-6aa4-577c-8536-71c14cbbf1ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agents-farmers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agents-farmers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd8da96b-5c0f-599d-9dc4-5e45cfe7495f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agents-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agents-kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b90a16d-6a5b-561d-adf4-87543f19a261","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agents-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agents-ledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd9d580e-7516-5e1c-98b4-ab4ce4b84338","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentsconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentsconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d5e500-e7cd-5f33-99d3-1ff07b21adae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentsdashboardhmrc.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentsdashboardhmrc.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64769ddf-519c-566a-ac23-34620c35422b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentsfarming.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentsfarming.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4577c5c9-99f5-538e-8de7-c31d0b6d802b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentsupport.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentsupport.biz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49f7ccc6-1c3f-5d2a-acf7-b6f60428bdc0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentswallets.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentswallets.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b915392-9d88-553f-8e62-1480982ba27c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentvaultss.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentvaultss.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebbbf3d6-5ab0-5452-919d-52b8268d7e04","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agentverify.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentverify.dev']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9e6a052-f096-5689-9dd2-08abc4009068","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ageofarmageddon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ageofarmageddon.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a906eeb5-08b4-5fa9-a4bc-41a154c95fad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ageonlymatters4chzz.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ageonlymatters4chzz.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca16765-4c92-5a9d-b11a-09e5d14310f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agestronga.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agestronga.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61d96785-a91c-5741-b624-3b792384934a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agestrongb.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agestrongb.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--014952cb-df62-5734-95cc-bbaa3177bf3e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agestrongc.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agestrongc.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8961577f-23fc-5447-bdcc-bd938a7d13e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agestrongconcierge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agestrongconcierge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a15d333f-bc4f-5cd5-83b9-a103dee4a899","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agestrongd.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agestrongd.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24ff1f77-7783-5812-927c-40279c1ef5bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agestronge.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agestronge.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c00cd9e7-f162-5fdc-8303-c0eece967c02","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agestrongi.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agestrongi.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8d6609a-47d2-522f-a3c7-e466721a3bb9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agestrongo.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agestrongo.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7858098f-6ac5-5390-946e-a4b44e973e68","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agestrongs.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agestrongs.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d27c4ea-e619-52db-824a-d33d0904cf80","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agestrongv.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agestrongv.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08579a2c-389f-5ef5-96e6-fab20356db33","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agewisefoodhab.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agewisefoodhab.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa35e58c-88ea-50a3-9f2a-e8f8f50fc27b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agewisefoodhabhz.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agewisefoodhabhz.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a2e6757-75ef-5dc8-b3e6-ff9895aed775","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agewiseforms.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agewiseforms.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e06b3151-eb69-50f8-bd24-586660411789","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agfarmequipsales.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agfarmequipsales.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7038f5fa-dc9e-5845-aed0-d0202abe487e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agginteractive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agginteractive.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aa1b074-b969-5159-8284-14f9f9568824","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aggiups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aggiups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77b92eca-0f47-5992-8ce7-dd4b20d42c1c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agi-globaltoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agi-globaltoken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c04dc02-dcae-5742-9830-347256f06a14","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agibattles.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agibattles.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe4ed797-2478-5176-ab58-5803820cf797","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agilefarmer.consulting","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agilefarmer.consulting']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--150a70e2-d0af-5583-9845-e6685a829dbd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agilefitbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agilefitbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1565af3-8a88-5b9a-bf7b-5f4a72c6508c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agilemanzone.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agilemanzone.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f53debb7-bc2e-597f-b864-3d6a9e61eb52","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agileorganicfarms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agileorganicfarms.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b4f1aab-8ac8-575f-9d35-28315c0cdf7e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agilepathbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agilepathbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e441cb9-2748-5404-a11c-4a2db362c7f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agingwellnaturallythebook.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agingwellnaturallythebook.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a7b9913-3a44-5d8b-ba18-eeeda45d7c0f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agingwiselyboomers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agingwiselyboomers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aabb1c11-a906-591a-a200-9eb6f9346219","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agingwiselyboomers.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agingwiselyboomers.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eff6569-38ca-52c8-8e47-ff2cfe0ac325","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agingwiselynow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agingwiselynow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cacb4fbe-6340-53b1-a58e-2d45a19e068b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aginlibonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aginlibonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f53fb327-5329-542d-bd3a-1096cf8844c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agirbassaguenay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agirbassaguenay.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf590196-2bf3-5ef1-b1dd-f47bd04adf8d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agirsxo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agirsxo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--642bd34e-3065-5058-b7a1-2807cdaf76fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agmail.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agmail.cc']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1614e835-abed-5c27-afb0-a97cdba2160a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agmail.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agmail.top']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b850ea0-a1f0-53d8-bb10-6790763ff757","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agmetgulatargmailroyal.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agmetgulatargmailroyal.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f463e40-c41a-5c68-b0e1-60d065fbe1f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agntclaims.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agntclaims.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca23d1ad-5dc4-545a-aa05-af2934460e25","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agntechconnect.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agntechconnect.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a77a24-dc7e-53d8-a5ad-b03faed1bee5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agonaba.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agonaba.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3463155-379d-56bc-b981-25bab38e9d1e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agonabaonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agonabaonline.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a9c3c4d-cf44-5069-a062-0391a6c42b8e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agoodgesture.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agoodgesture.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df7b6384-6c6c-5e8d-b940-24b0079cabf4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agorafarmaceutica.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agorafarmaceutica.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff21931b-768a-543a-a9f4-ae94a74a4d7c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agreatmassage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agreatmassage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b77d1e7-13eb-553f-af65-39f1fe9ddb53","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agreetstore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agreetstore.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9ad5eb7-f9d4-5f1a-95d3-17cd867b4199","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agregadossanchez.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agregadossanchez.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba4b93c6-2dfc-5826-8021-b781adb355e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agribafarminstitute.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agribafarminstitute.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--046b9a11-5478-5840-9a04-9aaeb5350add","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agribased.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agribased.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3624170e-b46d-5da8-a32a-52c86fc69c34","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agribridgeghana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agribridgeghana.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4d0d80f-d110-5b54-ba78-3547a0917fec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agriculturalfarmtractor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agriculturalfarmtractor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--798df6e4-a102-5561-a942-85d18ff8f56d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agriculturallandtrusts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agriculturallandtrusts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c4663b2-6b63-5837-b218-7fa3a1f866c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agrifarmcapitalsolutions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrifarmcapitalsolutions.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5075bd21-2bb9-59fc-a5b7-404651be3006","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agrifarms.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrifarms.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a20f3a61-36d7-58ee-9640-dec9c52a95c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agrifreshfarms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrifreshfarms.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eda0a03f-4b68-5e14-8a38-ba100e3b4233","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agriknowledgebase.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agriknowledgebase.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4236134-ec60-54e8-ad8c-f516c02d17a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agritoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agritoken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13112e7d-e1b4-52cc-9144-66df62914f4f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agriwisellc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agriwisellc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9a7bac9-c1f2-5c7b-84b5-8d685128a226","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agro-snab.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agro-snab.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a96612f9-24a7-581a-9100-baadf03bb30b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agro-snab.store","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agro-snab.store']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8021a06-381b-55f7-97de-8cd5c7d16e52","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agroambassadors.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agroambassadors.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb54c196-2037-5e2a-9aab-be20cc5f9e58","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agroavisac.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agroavisac.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dae2944-adc3-586a-ac50-28cf89a95d6d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agrobloomfarms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrobloomfarms.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec042870-27cc-5727-8c4b-6beddcfb0f35","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agrobridge.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrobridge.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--526116c4-1372-5944-9868-5c2e273bcb21","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agrococoafarm.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrococoafarm.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb8bc080-a72a-5513-8951-9c093684099b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agrofarming.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrofarming.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a7f921e-387c-5dc5-84c3-3fe00c513796","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agrofarmminers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrofarmminers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e563916a-867b-5a88-93cd-2fadffd86866","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agrofarmminers.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrofarmminers.trade']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--690b5125-face-579e-8211-9b73f8fb310b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agrofarmsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrofarmsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b740c7-40a8-5694-b2b7-cc12a1e1c97b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agrofindinvest.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrofindinvest.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dc80014-a0a3-5375-a85d-dc09494ea8f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agroindustrialtrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agroindustrialtrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eefc41b2-f664-5422-8eab-df9ff1c68f6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agromehatronika.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agromehatronika.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--027377ef-259e-52b5-949e-4a590cf12864","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agronomywork.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agronomywork.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0e747ee-4256-5ae4-9b15-d22d96c083d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agrorattaporn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrorattaporn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ebc3028-baca-511b-928e-b58d8c6135b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agrostreamexportsandimports.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrostreamexportsandimports.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e2c6584-8c26-551a-95e4-a4d966f3745f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agrosupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrosupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65555404-6d93-54e2-80df-baf98cb726ea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agrotradefarms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrotradefarms.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--386cc70f-7a0c-538b-8612-d344f7812dbd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agshopify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agshopify.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afc464df-9936-5c6c-891a-4a8699c0cd64","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agsrepairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agsrepairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--630325e4-8c9c-5627-93cf-84bdf4dbc845","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agsupsp.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agsupsp.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c9abc6b-1b44-5277-b236-380251418669","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agtcnamexs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agtcnamexs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d83f7f3-04e8-5211-aaca-414df7bf2c65","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agtrustsaca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agtrustsaca.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28ccdc43-10ba-5398-8e58-388eefaf30d0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aguilasmallorca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aguilasmallorca.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87006f25-def8-5349-adf3-0ca1b5893df8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agyapavault.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agyapavault.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa08cc50-9a56-5bd1-984b-da70c68d7717","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: agywhealthandwellnessaliance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agywhealthandwellnessaliance.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb4155b8-c438-5ff7-934a-5f71abcf19a6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahalgosaibigroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahalgosaibigroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb176aa1-831f-57bd-b68a-55b15fd12229","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahalgosaibigroupsa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahalgosaibigroupsa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0be4ef34-9705-5500-b8c6-5cf9ffc88b06","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahappyfarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahappyfarm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae464a6a-2b86-5699-993c-10e523b0ae4d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aharonamram.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aharonamram.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--722f71f8-6f64-5cb7-ad4a-56fa01f3e72e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahassa.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahassa.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2c5a630-f444-5818-b3c2-464542b039a7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahatrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahatrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8412d75-4373-571b-a224-05244288dbfb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahatrust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahatrust.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a87494f3-ee76-5238-97ed-6557b9b8a3f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahattw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahattw.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd546e02-b750-5f7f-92e4-b982e360aed0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahcusecured.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahcusecured.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbc71ce5-01cd-5cf7-b741-d7da20f9d905","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahdaconnectionshockeyach.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahdaconnectionshockeyach.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb4557b9-25ec-5839-8b58-f8a9346b06b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahdalltrust.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahdalltrust.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b97dbadc-8392-5552-9594-dbd2b663ece4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahdtoptrust.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahdtoptrust.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ec4312a-3924-5543-87c8-909ab05e020c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahdverify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahdverify.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--015c84fb-007c-59ae-9af2-3d82bbde85cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aheacdsnab.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aheacdsnab.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4b51c69-fc2a-5cd2-9228-b324a88ddaea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahelpinghandseniorcare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahelpinghandseniorcare.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41bb393c-b469-58f3-8ba0-428893e7d6df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahengsuip.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahengsuip.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a458922-3132-5af8-b159-93ef0ea2f913","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahernmassageschool.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahernmassageschool.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b25cb867-ad49-5c54-8b2a-b432ed152f9f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahhmpxdcpy.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahhmpxdcpy.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4ff898e-f44d-511d-8375-d1249af01743","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahi112bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahi112bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a73935ee-e8f6-5570-a22f-d11ecc0319d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahirst.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahirst.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b82de6f-8394-5a44-8e09-8aadfc783788","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahk-trust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahk-trust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccead258-1872-5174-8872-35d0f25d4188","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahla5ababa.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahla5ababa.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffb45bf5-b950-596b-acb7-a58469f06b8b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahlayattrading.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahlayattrading.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95b40465-e245-5dbc-9ddf-42d653bc02a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahlidomino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahlidomino.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a247fca7-2076-578f-81b9-126cff0ecf84","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahlidomino.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahlidomino.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77c4ca43-6e97-58df-b362-c7c6787d6fdb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahlidominoqq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahlidominoqq.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f592ee4-276f-5cbc-9b7f-1852384405d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahlivitamintips.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahlivitamintips.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c16c1757-9345-59c5-b784-596b299352fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahm33ethgmailzula.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahm33ethgmailzula.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70009239-641a-542e-90cd-c2c698e6d8f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmadfaraztrust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmadfaraztrust.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc67fd80-2c75-57ae-95fd-60459586998e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmassan.store","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmassan.store']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72738225-b6a6-57a0-b21a-cf0e33361941","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmedassantam.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmedassantam.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f99b569d-7549-5efe-b1b6-167fd03df783","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmednissan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmednissan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79be984d-9d1f-5af6-8a37-77fee47c059d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmet03zbonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmet03zbonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc48c9e5-8233-54d8-85fc-f581041655ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmet7234bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmet7234bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90a1fe3b-8846-5068-8d45-0385ae6da8c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmetakyolbonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmetakyolbonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cc3c862-e299-5872-9ec2-846b9802df0a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmetatr27gmailtam.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmetatr27gmailtam.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1281b1e-4fe4-54e6-9911-0b20bf8dec8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmetb55bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmetb55bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70dc096c-cfb8-52dd-b59d-b3cf829c807a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmetb55bonanza1.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmetb55bonanza1.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76005150-6691-5efd-a2e5-bbd458416076","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmetbaki199642gmailroyal.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmetbaki199642gmailroyal.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fce2806a-115d-5a46-a358-274cc7c99845","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmetcansubonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmetcansubonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8577215-2bf0-582d-9210-d6774e95e299","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmetdo70bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmetdo70bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69ce7801-b541-514d-a39e-385dd79d726b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmetfurkan06ptbonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmetfurkan06ptbonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9419b598-b40c-52bc-86fb-36f4583843f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmetfurkan06ptbonanza1.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmetfurkan06ptbonanza1.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0987e69-6f72-58e5-b01f-f34d471c72cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmethamurlubonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmethamurlubonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--352fc0f8-778b-5deb-a130-e135850dd1d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmethamurlubonanza1.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmethamurlubonanza1.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60dea4e1-0635-5ea3-84d6-2616f4f77066","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmetkonyabonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmetkonyabonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9f39765-0303-51a3-9ed0-b82cfd91ce08","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmetkonyabonanza1.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmetkonyabonanza1.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39bf71d4-1d4e-5905-9ea2-dd7ad2a2e700","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmetmuratbirlikbonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmetmuratbirlikbonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46870bfd-2370-51ab-b3fb-337078b09256","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmetmuratbirlikbonanza1.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmetmuratbirlikbonanza1.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42f6c1cd-af69-5838-81cf-d5689abcd8f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmetseran9gmailson.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmetseran9gmailson.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ad5bc6f-65a0-5954-b73a-f82165e1210c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmettugurrr123bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmettugurrr123bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ac8bb82-0c15-5441-ab08-5ce4edeac27f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmmadhossain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmmadhossain.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92eea459-6f92-5db2-8383-cad4fd564c98","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahmrc4.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmrc4.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa211232-c1b5-51a9-bf80-a0f8aca09f3e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahoramedicare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahoramedicare.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48365de4-f32c-5aec-8928-a421d5eb5fca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahorasianzoategui.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahorasianzoategui.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--219132b4-3a47-5fcc-bf7b-0cefdc46b41a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahorrowisees.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahorrowisees.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa98b7ff-e458-5140-b596-1e281bb103f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahostingsupport.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahostingsupport.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9081d6f-041d-560a-af64-56626cf35648","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahoycrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahoycrypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b15a7dfb-bbb4-5486-b0d7-bfc8daef8ef4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahrainbowdekor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahrainbowdekor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84dba4f1-709d-5f06-ae77-f0480b459a94","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahsbcbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahsbcbank.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2120e397-e43e-52d6-bbca-ff660e847b0d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahshatter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahshatter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82cb2ded-7a88-53ea-ad57-d1aefc3db459","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahtrust-ex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahtrust-ex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed5498dc-7dce-547a-afc0-2eb7f1c2bca6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ahwcbhjrbcer.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahwcbhjrbcer.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f617827-4012-5b38-b530-0d6fa9430429","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ai-ads-best-mobile.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-ads-best-mobile.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c95f0154-1d62-5bc6-a1e7-c9137c5f46cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ai-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-binance.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f4584d-eb84-574c-90b0-14afc1e02813","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ai-binance.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-binance.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a5ad53-8220-5f8e-bc96-626a28107640","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ai-binance.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-binance.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edf36606-9aea-5d69-9d46-44d8182232fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ai-businessadvisory.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-businessadvisory.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed660239-50e3-5b1f-aeff-d3461f689ea4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ai-claim-regent.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-claim-regent.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58918fba-68c6-5c46-9f6a-b83039b03cc1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ai-connect-hub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-connect-hub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03439598-548d-5178-b5db-4d8010f728cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ai-crypto-bot-global.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-crypto-bot-global.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03ed9b52-55a0-541d-b306-687d544a2426","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ai-crypto.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-crypto.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e28556a9-87a5-5dab-b856-034b493a74be","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ai-cryptohopper.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-cryptohopper.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7af4e2ad-d152-5614-83f0-b568d6a5bbde","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ai-enabled.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-enabled.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a3e1a4-60bc-556f-b987-f5c0a8d3c018","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ai-mianzjing.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-mianzjing.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdb48451-719c-5d59-a6ac-490a83ee6d1e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ai-tattoo-generator.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-tattoo-generator.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--705d6028-7a26-5941-9d20-172153210ad3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ai-token.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-token.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bf785fe-d8e7-5683-b8f3-692fad7a0d02","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ai-token.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-token.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1688770c-7437-5b96-814b-e414d77853b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ai-token.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-token.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10587120-355b-5f00-a9be-ed4849827f22","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ai-token.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-token.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe2df319-6a3a-580e-8f5c-0a9d2efc7a59","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ai-trustfund.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-trustfund.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4277cb7-f0e8-5925-bc31-0649210b5efb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ai-web3.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-web3.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3c4b45e-7c9b-5024-b17c-832d96562574","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ai-web3wealth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-web3wealth.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abbaedf8-511f-5a3a-9db3-1b79a242e71f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ai2026-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai2026-google.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--208ef91b-a8ab-5023-8afb-7560c66fe4b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ai2030revolution.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai2030revolution.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fe78646-1380-5b26-b431-aee98b411473","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiadsbestmobile.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiadsbestmobile.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee9e1236-eb15-5698-8b1d-dd10b1484549","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiadvancedreasoning.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiadvancedreasoning.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e222c0-92c8-59f2-9a94-dd99018cc5d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiagentbridge.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiagentbridge.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--662635da-f822-54e8-b619-acd533a982a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiagentsbase.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiagentsbase.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dd349fb-3d4e-5876-abca-8170b688c76d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiagenttokenhub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiagenttokenhub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1abcbba7-f7fe-5387-9034-d4bb5cda1445","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiagenttokenpro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiagenttokenpro.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce989b65-a844-5bbe-b636-833ffc1cd467","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiailive.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiailive.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9f9413d-e073-5ed1-b10b-9717eee69e3b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aialgocamp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aialgocamp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d73dbcf4-b56a-562b-a799-2420a19ceb0f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aialgocore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aialgocore.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6a9e2b9-cf63-5961-b17c-c6a31e26827b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aialgodrive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aialgodrive.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f563a0f2-c0da-54a2-94eb-4710d76262a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aialgoflow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aialgoflow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--815e5038-5668-5cac-aae9-f552af3e0147","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aialgofusion.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aialgofusion.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e78abdb7-1658-5529-94c0-fc0b4b2dda13","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aialgohash.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aialgohash.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b67344d-e17c-52ba-a495-2e98af102c37","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aialgorithmforge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aialgorithmforge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a3100c7-7b41-593e-a6b0-649bf9d883e9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aialgorithmicforge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aialgorithmicforge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad800b87-c81e-5e3d-a971-518e22a48cc8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aialgorithmicpath.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aialgorithmicpath.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a1d65a3-88be-5ad0-8db5-17ce584e8027","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aialgosense.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aialgosense.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0848fdc-2036-53c8-bf4e-748469286008","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aialgosphere.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aialgosphere.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23734a9d-6ecb-504f-91c2-765972713c74","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiallymarket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiallymarket.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--194c66dc-c14f-5417-9009-7b95e34c2891","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aianalyticengine.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aianalyticengine.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63e0b16a-f4a5-59fd-b1e4-acf2273fa218","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aianalyticmesh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aianalyticmesh.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e42983ac-6d43-554f-8a0e-78d0815b7242","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aianalyticswise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aianalyticswise.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2684369e-44b5-5920-a67a-60f039ab9498","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiautopilotfirst.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiautopilotfirst.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8ddd79a-5c7f-5af0-a614-1b469ef2c632","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiautotradingbot.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiautotradingbot.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5352c5b-6b24-55bb-b529-d4b86cab4f31","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aib-support.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aib-support.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fc8b8d6-8d8c-5a41-83f1-a4e542e2e6a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aib-update-auth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aib-update-auth.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9d89ae1-d50d-5dc3-a4a8-d2658be64e66","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibakewise.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibakewise.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84afe52b-3042-5c06-9486-ee6816390acd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibanze.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibanze.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3063d7c1-4a74-5363-9664-3c318eb2552d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibasecamp.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibasecamp.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aeff974-a69d-536e-8831-ac6c545356e1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibasecharger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibasecharger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1a42256-3f00-53b9-8bb5-0f91a72722a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibasecore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibasecore.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2acce010-76b8-5ba7-8b1c-3368c9250267","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibasemachine.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibasemachine.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b36f427d-448e-5b65-a072-72c67525048e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibattery.global","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibattery.global']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a554f2ff-d305-5c4a-b809-31914744df33","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibatteryglobal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibatteryglobal.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb3a4f93-8128-55b2-974e-42e1945f9c75","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibatterys.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibatterys.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40fe038e-edec-5b04-a121-060eeed55d22","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibigdatamap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibigdatamap.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7199d05-1029-5730-a55c-50affda947d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibinance.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibinance.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1a2fb74-565e-5bb6-9490-c633700a50de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibitragevault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibitragevault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aa2e0ed-36ff-506c-a996-155fcae46c1b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiblendwise.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiblendwise.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dca6bf6b-c6a9-5722-bb9f-fbf8999d22f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibnbusdcweb3.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibnbusdcweb3.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ea3d41a-bb86-5d64-9a82-52e50d37756c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibnbweb3.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibnbweb3.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06cfecb0-b23f-57bc-92d4-6ad023815d20","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibotmessages.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibotmessages.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5270311-6c23-559a-9c26-3ff03dff89dc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibotrevolution.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibotrevolution.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eb2f422-1541-5f13-aefc-697822204533","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibotscale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibotscale.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--850d2059-dc93-52e6-bf76-e3e8e4243053","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibrainframe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibrainframe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--747c9239-5f9d-55bb-a039-707ad0da7086","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibrainyard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibrainyard.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34256c7b-9f90-54a3-ae0b-5ab028a4eed0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibrandwise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibrandwise.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f142ec9f-bd5d-5262-aeec-c9b73aceb216","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibridge.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibridge.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18e09583-006d-5a05-8e34-59a509c0f3f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibridgeacademy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibridgeacademy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cb88aab-cb25-50a1-86e5-17f438bea1cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibridgecloudx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibridgecloudx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6930bbc-cbde-5d5b-8524-ad7d3d4a1607","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibridgedirect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibridgedirect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5044d0b-3f1a-554d-8c88-d0fb2b230ea9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibridgejp.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibridgejp.biz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed213be2-df41-525f-b7f5-158b539a31a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibridgelearningup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibridgelearningup.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--286d4a05-a219-549e-813a-fc56c6a6b132","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibridgerg.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibridgerg.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8387d89-6a45-52e7-801a-f5dd0ad12760","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibridgetrading.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibridgetrading.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--933ae1e6-847a-5448-bdd3-fc221677e249","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibridgeuptop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibridgeuptop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68285a17-7ca9-5f50-a30f-077949e1084e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibridgewire.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibridgewire.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54438306-16ae-58bd-9ac0-35421ef52508","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibtrust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibtrust.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3196e507-05a1-5153-ad5b-2ef7b01a0425","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibuildersguild.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibuildersguild.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6472d0dc-0e2e-5cf6-b8e1-3cac3dd3089a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibuildnet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibuildnet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7352182-2082-5340-9e55-744cb250b751","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibuildspark.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibuildspark.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6ff99e4-165f-5556-8d4e-e088c1129c44","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibusinessadvisor.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibusinessadvisor.digital']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8b7cecb-db2c-558d-a0b6-4c54d0ad5165","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibusinessatlas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibusinessatlas.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1f80b26-13f6-5bbf-867b-bf9c9eaf4783","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibytebridge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibytebridge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f3a164a-a1eb-5f97-80b1-9806a466488a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibytepad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibytepad.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38076b7a-b22f-5668-8bab-702410839729","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibytestoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibytestoken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dd02197-4826-50ce-87fc-ebbda5200b5f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aibytetoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibytetoken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d8f972c-65f3-5659-9bd1-b94282452893","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicalcengine.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicalcengine.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--861d4f57-9e0c-54a2-ad9f-7afc845dd042","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicallsuite.art","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicallsuite.art']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--230d22be-3fcf-5e52-9427-b9f167492492","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicallsuite.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicallsuite.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--020784bb-d9c5-5a52-9ab8-b2305ac769d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicallsuite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicallsuite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90f3e460-3007-516b-8d3b-742ceed0dfab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicallsuite.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicallsuite.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a2e20e9-d49f-5b3f-a138-48ed6c1958e2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicallsuite.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicallsuite.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b2a63b3-4a11-5d04-85d7-5a3f0a2d353d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicallsuite.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicallsuite.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be37f55e-b139-54cd-afdf-ee915a30881c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aichatbeam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aichatbeam.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6711d3df-2d3b-52ab-8e0a-e63d3df6f335","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aichatfuse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aichatfuse.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ba20bc8-30b7-59c1-bb9f-752f45182464","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aichattask.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aichattask.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0700efac-21cf-5691-8f70-93f776ed8f89","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aichattrpg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aichattrpg.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--095cbcee-de3a-5518-8462-fb2163d5c411","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aichippad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aichippad.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b90e80e-70fd-56a2-b8ce-30eb4be47202","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicleanwise.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicleanwise.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4c471fe-31f7-5b05-b6af-4bfa9a4454a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiclipfarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiclipfarm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e098a84-8e47-5b9d-80ef-c9e492ecb9f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiclipfarming.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiclipfarming.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ae740c4-2c68-57fa-a040-2a7c690d9ef4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloud.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloud.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10724473-4de8-5d18-a0b3-99249b25ff80","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloud.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloud.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e629bd2-cd10-53fa-99c8-f1ebaa09f44e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloud.plus","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloud.plus']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47fda38e-04b2-5c4d-a246-0d11f3abf215","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudassist.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudassist.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b617aff1-6588-5b1b-ab1e-3046ce676eca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudcamp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudcamp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b1c1dd5-fd1c-58bd-86bd-f31252edcf18","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiclouddev.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiclouddev.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb1f275c-38a1-5b5f-9db2-354e84f7bb0f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloude.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloude.biz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9038a48d-7a47-5dde-86b1-1a3c55f066cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudinvest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudinvest.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f01000dd-6d30-5467-915e-c2c99b23a591","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudlaw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudlaw.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0933b136-7377-573b-8604-b876618a83f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudlayer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudlayer.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f71fa0d-9d69-5d9a-8645-ae4474c8a677","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudload.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudload.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b4de2b7-2677-5447-a585-0d1a731e4ad7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudmesh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudmesh.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--909c1c48-147a-5a41-ab72-c7da9115fee9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudmind.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudmind.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21d75e00-a9e1-5a13-a941-5c5ac64172cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudmining.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudmining.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45436b59-d003-55cc-ac42-b0dca6569113","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudmining.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudmining.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bca46da-f84f-5a3f-9f51-d027dfcbcd6e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudorbit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudorbit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de82269a-0773-5f13-a60e-f863328d3f2d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudpool.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudpool.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4407f105-6fb4-5433-af62-12ecc94c5524","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudray.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudray.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4b2607-08f8-56e8-979b-3e0282a9ff1f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudreactor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudreactor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1474c529-8cfa-5569-bfd7-18f67e9c0ff5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudroute.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudroute.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13bdb1cc-57ea-5830-9c30-94624d3327c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiclouds.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiclouds.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78ea35ec-22a5-5536-a6c8-8373a289f38b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiclouds.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiclouds.cloud']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e36dd185-7a1b-5b4d-a4fc-2082e717923d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudscope.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudscope.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35625e8a-7102-58c2-b407-686d06fb37b9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudservices.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudservices.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba4c87d0-ea39-58d8-83f5-997d7ccab3f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudtech.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudtech.top']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8881ed8b-92e7-53e5-a8c1-741b0ccbad24","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudthread.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudthread.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2bfc8b7-8619-5495-b7c0-6e1e5568657d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudtrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudtrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59504e6e-aea2-5d24-a5bb-85e67bcb0a92","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudweave.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudweave.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf0ae41d-78c6-536e-9dce-3a1cf9dcd77b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudweb.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudweb.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ecc8912-fdad-5ac6-b04c-91dd587581e1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicloudx.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudx.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5ab1231-948d-5cb2-8b64-da01c301e520","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicnowbase.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicnowbase.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37277f2d-fe4b-586c-a0c1-46f90529855e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicodebeam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicodebeam.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4110d38a-2dbd-5ccf-88ff-a04666c90f07","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicodefoundry.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicodefoundry.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--799cc802-e7cc-5d9a-b087-ece3f50fec82","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicodeport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicodeport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39e691a8-1659-58f1-b2cd-7dda6c4ba14c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicognexora.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicognexora.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4360156-413a-522e-a867-74491eb65114","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicognistack.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicognistack.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c528ebd-21e4-5fdd-988b-81fdaf6c0dda","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicognitiongrid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicognitiongrid.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39114404-1175-5cb7-8ea4-d88cc10f4a27","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicognitiveforge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicognitiveforge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b262b47b-03d7-586f-aa25-95454830957a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicognitiveframework.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicognitiveframework.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee3e3f4a-18bf-55fb-808b-f930b0104453","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicomputedgrid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicomputedgrid.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1253c55-69c1-5fc2-bb9e-64d4fb28e6b4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconfianzadata.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconfianzadata.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4838c4b6-e993-5bce-b6d5-64d6db9b1538","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconftracker.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconftracker.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ace80af-462f-5223-bec1-de5a710a0182","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnectbacolod.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectbacolod.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2ba33e9-6092-534f-826f-2d72cd65ef57","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnectbaguio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectbaguio.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2199dae-726d-58fa-80d9-adee34bd69c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnectbarley.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectbarley.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00ec04a6-5117-580e-b55e-f5f0c85b3cc3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnectbulacan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectbulacan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa722cbb-e55f-5fec-bcf3-6c79cc574d22","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnectbutuan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectbutuan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be986a34-ded9-52ea-b0fc-b880865a9fc2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnectcavite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectcavite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20ec1d76-4c96-53f3-a55e-e427669d0945","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnectcebu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectcebu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58d28439-29d7-545b-a5fe-79e47b55eaee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnectdavao.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectdavao.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b68c38a-0128-5f1c-aa47-deff4a3337c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnectedcar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectedcar.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18ac9f5d-f9af-5def-9305-a9455b560b90","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnectedcars.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectedcars.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97038d36-3f8c-54b0-86e3-2258e34f127b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnecteddata.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnecteddata.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5b0ee6a-eb1c-581c-8d1d-6ac7df385460","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnectedvehicle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectedvehicle.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da77c6e3-1713-541a-a402-74a7f37cc6bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnectedvehicles.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectedvehicles.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f00a58f5-1f32-52ff-aec7-a3eaaa9cc54a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnectgensan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectgensan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acb40ca2-31f3-5786-b7c5-276ae0d1fef5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnectgluta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectgluta.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6fb1d5b-241c-5c68-9635-0f51f0b14f1c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnectgummies.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectgummies.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35ba9434-cf1f-51dc-861b-39355a6eaa1a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnectjapan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectjapan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--227d4029-975d-5a6e-bece-143fc44dbfe2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnectlaguna.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectlaguna.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89d8c711-1375-580d-8d4b-3dfd2d7f25c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnectmanila.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectmanila.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0fe2b5b-bb5a-5c83-a515-959bbffb20a3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnectpampanga.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectpampanga.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15f6ee57-9526-5716-87ba-094395e35b3b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnectpartners.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectpartners.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c7a7043-646d-5335-99c6-a78a0fe6d79d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnectreviews.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectreviews.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81ac6437-0d31-53fd-a3c1-ba0fbac50dec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconnectzamboanga.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectzamboanga.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45133af8-0cc8-5ef4-899e-a2cf6270d7e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiconsciousgrid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconsciousgrid.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f3d72d8-5187-59d9-8afc-2cc382a5b220","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicontentarc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicontentarc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02e02419-e2d2-5a52-9384-b35bab08de1a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicontentsuite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicontentsuite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dbfa43d-6814-5f76-af63-5bd3af584f46","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicoreconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicoreconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efd8ebe1-9ebc-537e-aa01-2705a074e11e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicoremodels.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicoremodels.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--996aed4e-29d6-5c5a-8ed4-522673a0df33","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicoresecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicoresecure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21418cf4-81c8-5db9-bdc7-abb7e744dfe5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicoreupdates.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicoreupdates.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63923826-d838-57c6-a925-b48238abf827","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicortexlayer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicortexlayer.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79a7732a-c171-5f6b-aa71-06460b7c0946","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicortexnexus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicortexnexus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f461460b-6ef8-5ad6-bc64-b50da9eb7a44","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicrdhla.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicrdhla.wiki']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca99fdc2-745a-5afa-ace5-4ea49687cc76","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicrypto.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicrypto.trade']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8a0e49-1a90-586e-928c-78d6e0f90d0a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicryptoclub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicryptoclub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a196ee21-1ede-510f-9e18-2e6d798683ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicryptoguy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicryptoguy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb231c8-a5f9-5aba-8778-376f7c42cbf8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicryptolabs.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicryptolabs.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55f96048-43fc-57d2-ac7c-42f1b0a199bb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicryptolive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicryptolive.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dee7d32-881d-5de3-90ec-0b783cc70bf6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicryptomining.ltd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicryptomining.ltd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da335c43-1685-5418-bdb2-28221f7ead76","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicryptonewssentiment.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicryptonewssentiment.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88aa32dd-2ca3-53ae-af29-85e51428778c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicryptoradar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicryptoradar.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42bb66ca-9b9e-5d50-bd34-c14c3346726a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicryptorobot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicryptorobot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dabb6d41-72d7-502d-bfba-fbc316171ccb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicryptotech.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicryptotech.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5573b71-ab77-5f16-aab1-19e62e403e2d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicshanzu.church","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicshanzu.church']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5f82642-f6c5-5a82-9fe3-c62df557681b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionsfinder23.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionsfinder23.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c536750b-32f3-56e5-a00f-31e186bffb70","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionsfinder29.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionsfinder29.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--009b28b2-61d6-5d07-9513-2a7d8971b48e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionsfinder37.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionsfinder37.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a73d4403-19a0-5d16-8665-a61b18896b6f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionsguide19.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionsguide19.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06d1ebf9-1f66-5770-9474-865506df7446","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionsguide46.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionsguide46.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77e1eb2c-44bb-5caf-9818-c77e36d6820a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionshub16.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionshub16.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc80f4d7-1c38-5e00-81ec-adde9ea1a313","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionshub31.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionshub31.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3210014-b01b-54b2-9585-0ad41229bba0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionshub46.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionshub46.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be8cc521-7d13-5c48-9a6a-04a239dfbb96","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionsnet02.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionsnet02.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3a67286-3b63-555f-8ee1-a41e2fa75ba1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionsnet20.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionsnet20.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49979600-6e4c-558d-9837-62399b38e70e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionsnow25.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionsnow25.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf609d0-a654-58b9-8787-174e60611b6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionsnow27.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionsnow27.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--014dbaa5-9e90-598b-ac7b-77621cc0d4c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionsnow32.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionsnow32.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeaae6db-4934-54a7-9133-a1995c09b2fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionsnow38.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionsnow38.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b0196e2-904c-5557-bcc8-6101745f3edb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionsonline12.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionsonline12.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb65aa57-dccd-592b-ae75-a95f175293d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionsonline37.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionsonline37.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66b79b69-f8a4-5c8e-bc57-092ea7ecdfc2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionsplus28.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionsplus28.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1825283-bfb2-5d97-9335-f51512704850","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionspro07.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionspro07.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7bc9223-7f14-5d0f-969e-c7765ad2ac5d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionspro13.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionspro13.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c03fd57c-a416-5665-b876-a5872197d480","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionspro42.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionspro42.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b26c954d-36d1-504a-8372-049270fe1bc1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionszone17.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionszone17.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a7f074d-3b29-5ad3-95da-caf7b9f0712e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionszone32.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionszone32.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8091d397-1b62-5cd5-b083-89eb58a4375c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicustomersupportsolutionszone45.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicustomersupportsolutionszone45.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d6f6350-45b6-5b90-9ca4-ff93036566c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicyberbyte.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicyberbyte.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46b9344b-0260-5711-854c-cee90549b3e9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicyberimatrix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicyberimatrix.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c06e4247-dbd9-5851-83e5-77613e871a79","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicybernode.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicybernode.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a241191a-17a8-5148-bf0d-38a58332c5bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicyberpath.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicyberpath.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43bce9a2-e214-5be3-b181-42b10110bc77","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aicyberscale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicyberscale.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56fbdb53-1d8a-5e9b-b6f8-197e46a354a9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aid-connect.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aid-connect.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87d47f07-0d05-5cb1-af9f-e340f4108bb5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aid-hearing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aid-hearing.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d559cf78-154a-5c83-8588-fd2232337c27","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aid-secure913667.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aid-secure913667.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee6f17d3-88aa-529b-b4e2-4fb16ca96d5f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aidanabaiguzhina.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidanabaiguzhina.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bbc01ce-ccd6-5fd2-a43e-e603c8cb0ba0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aidataclustering.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidataclustering.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e41b6911-e4dd-5973-816b-548870918790","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aidbeaminternational.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidbeaminternational.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13600b1f-f4b2-51c5-b468-0e7a12956a65","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aide-suivi.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aide-suivi.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59830344-afe3-5fbe-beec-60a6fe4034f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aideepanalytics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aideepanalytics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31e09ec5-bf15-57b1-9852-8d3bbd7e3a0e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aideepdeck.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aideepdeck.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c931c464-a647-5ec0-aaa9-0027f319d659","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aideepflux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aideepflux.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45d2c97b-0809-503e-8a1e-9db29bbc2e84","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aideepspark.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aideepspark.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2a45357-110d-50a6-9a7e-3ab5f859a158","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aideepvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aideepvault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12803ede-c046-5547-9d96-36157f30f592","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aidencharleschase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidencharleschase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8480ab1-6f3f-57d0-8da5-f9ed2b6343fb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aidigitalledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidigitalledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--771ce043-cbf1-5137-9f64-6b5009cb8574","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aidigitalmesh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidigitalmesh.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bf4f07e-139a-5999-9322-c8693673d426","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aidiscoveryedu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidiscoveryedu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66ff8b8d-7c69-5ca6-a10b-35dc4be3c249","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aidiscoveryedu.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidiscoveryedu.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0c31ff8-7c91-5e47-82ee-326dfdef04b4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aidiwattlighting.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidiwattlighting.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0516a28-d7c6-5b66-9064-60718e4c434f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aidmoldbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidmoldbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9ebfb6c-73d6-5b5c-a0c8-df7a9dd9496b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aidroning.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidroning.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--773e2c6c-1e49-548b-be5a-8e1ae1f84c40","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aidrop-pendle1site.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidrop-pendle1site.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ff23a1b-00ed-5b44-97e6-eaf1702cbb4c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aidrop-walletconnect.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidrop-walletconnect.network']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e03df63-38e9-540d-91ef-86d5339df914","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aidssaintjohn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidssaintjohn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b232b1dd-a1d0-5773-abf9-3f135b0711d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aidwise.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidwise.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f26876d0-ad7d-554a-8b90-985a900594dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiealthtrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiealthtrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ee69427-f685-532b-9edf-772cd32d0571","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiearncrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiearncrypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--382a1e65-f175-514c-a76c-38904ae5b1bc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiegroups.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiegroups.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f628a34c-5ef3-5266-93fb-8e06a1e3403a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aieic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aieic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--802ad982-938d-51fe-83d0-339d2a320271","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aienabled.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aienabled.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--801139ce-c37e-5dcd-ba78-7678e474f259","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aienableddiagnosis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aienableddiagnosis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c05462ea-30e1-5f34-8314-13be869f4b96","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aienabledhealth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aienabledhealth.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5da2ef2-052c-5aa5-be0d-f9a0a587a375","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aienabledmedicine.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aienabledmedicine.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cde932fe-2e0b-5e4d-8122-137310da404e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aienabledscreen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aienabledscreen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--639468b5-c025-58fb-8c1c-ec1340402558","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aienabledscreening.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aienabledscreening.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf7cf58a-9a18-5f01-bb4c-c1aafd589c2d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aienabledscreening.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aienabledscreening.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd098e7-f30b-502b-a82f-87e2196f1e74","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aienabledsolutions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aienabledsolutions.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1194700-2222-59c7-856c-1504892f3c3f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aienabledtechnology.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aienabledtechnology.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0132821-c0b1-5a89-9541-54fd6fd086f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aienableed.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aienableed.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c175c9d8-7b0e-5977-92c8-499219afeefe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aienterpr.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aienterpr.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97e648c3-d46a-5efe-89dd-3b3cdd4644a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiepochepixels.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiepochepixels.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d69c1759-9168-5059-b0ad-ff55a6555812","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aierlanzhongguotongcuhui.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aierlanzhongguotongcuhui.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6125b877-edb5-5550-a49c-5a07b570f55d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiessaywriter.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiessaywriter.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7394377c-deed-5a35-944c-16fc4011c20a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aievolvelogic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aievolvelogic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48cd5b70-78f5-5e31-8fa4-87c4d5cfdf98","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiexpertsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiexpertsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac010a41-62f2-5865-83ab-8cf4a35f51ba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiexplainableai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiexplainableai.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cda5f524-f805-5303-81cb-faa075e4e2e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aifinancednewtrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aifinancednewtrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dbd1a0b-8066-578c-94f2-fa55c2cbbddc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aifinsupport.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aifinsupport.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--937eff3e-74d5-563d-8fba-8d54eec7277d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aifirst.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aifirst.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76895852-a240-56e6-9ad0-60f771fa289e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aifirstcircle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aifirstcircle.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5b65373-ab4e-57d3-86ce-44af4615069b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aifirstplatform.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aifirstplatform.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20c74ca2-853a-5f2c-b8d6-42c809832a8b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiflexbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiflexbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc73ffbe-08a8-55df-8ddb-e20c84eeeea6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiflexsuite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiflexsuite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe612dd6-55ba-58a5-aced-84000dc3bb8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiflowwise.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiflowwise.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2e084f3-3886-566a-b52f-a6087d79240e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiforattorney.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiforattorney.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98b73426-d343-5542-8b6f-e229dffef8ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aifundbtc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aifundbtc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b263e80d-6d5d-5746-be64-c9adcb69bcc9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aifuturebase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aifuturebase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--634a048e-9e4d-5256-af84-38fe0cbae885","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aigemstrong.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aigemstrong.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b8986a1-1866-552d-ab21-38777707e134","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aigenorbit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aigenorbit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--486109ee-aa50-50c7-a430-16bb4cac5c2a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiglobalassault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiglobalassault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4062598-d03d-5f04-9f3b-1c24676ef5c4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aigloballyinvest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aigloballyinvest.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af8a372e-c8d3-53cd-a01c-a318daa0275b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiglobaltrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiglobaltrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b518f5fb-0f50-576a-90da-6aa0e6ebc4d0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiglobaltrust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiglobaltrust.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--804cf59b-5917-56b5-b028-70ea9f3140bc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aigoogle.run","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aigoogle.run']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89f8c370-2220-598c-9810-cba6a4e127f4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aigrowthtrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aigrowthtrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16fcfefc-9280-5a7f-b124-837a742d1442","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aigtrustholding.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aigtrustholding.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31e1ee09-08cd-5e5d-9b83-43df93de5103","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiguesargentona.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiguesargentona.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ca62e28-496b-5159-bea7-c66b2c9a3c76","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiguidevault.best","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiguidevault.best']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36972c37-a439-555b-aa9f-74a0d70fa873","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aihairstyles.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aihairstyles.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec6eb561-19b1-507f-b457-8c6bd0cfde83","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aihomewise.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aihomewise.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dd5aaad-41cb-5ee0-885d-b581fb642423","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aihuanlianzaixian.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aihuanlianzaixian.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2f95522-a3a7-53f9-81e3-388165515afe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aihuanzc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aihuanzc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c3f0244-ace0-51a4-aacc-8079d3c864e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aihubconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aihubconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54c39568-8543-57f9-a463-8a6164a42229","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aihubmanabu.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aihubmanabu.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aafbb7c-5ef2-5afd-b902-4b4843383234","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aihyperepoch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aihyperepoch.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5810c41-1164-5107-bc33-7f4140f1cb46","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aihyperpulse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aihyperpulse.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f78810d-572e-59e0-8fd2-77d8e71ba4ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiiciconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiiciconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80747db5-8557-5795-a2ed-8fadc9363ff5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiimageflux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiimageflux.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cad9fcc9-64c5-538d-a7b1-75520ef38dcd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiimagelayer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiimagelayer.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b519d91-62aa-5dc7-a640-f8a71cf7ad8d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiindicatorenable.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiindicatorenable.dev']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a609793f-28a5-5bef-a31d-f900bdb05e39","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiinnft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiinnft.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5acf0108-9c5a-5a5b-9d21-21f8275a63b8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aijupiter.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aijupiter.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--666375ac-c08d-58c7-ab67-0044e81508f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aikanzxxcnsp.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aikanzxxcnsp.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a60c116-c8c3-5415-8365-1b8266fc1c6e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aikassa.expert","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aikassa.expert']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edd83100-8c00-5401-9dc4-2e5bda601ceb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aikilowatts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aikilowatts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28ddadd3-ec3d-5a7e-88de-4cf289024ca9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aikomtrustbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aikomtrustbank.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb248c0-0fe0-5a14-83c1-970c25c720c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ailabmotion.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailabmotion.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70374b52-185e-57df-a401-514b0ffa0ee1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ailabmotion.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailabmotion.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6116046-248c-5211-8918-880cdde39ddc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ailabsync.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailabsync.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46770950-c253-5141-b8f2-f4756157006c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ailacrypto.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailacrypto.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24e66e38-b730-5fe7-bde0-38205631113c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ailaiduanzu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailaiduanzu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a44ac92-ea7e-5062-958a-9881d9514e8b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ailayergrid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailayergrid.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c41a5f2e-1931-51f4-bf5e-17e056d35262","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ailearnstack.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailearnstack.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--074d1730-6e01-5adf-bc6d-383fc0699d9c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ailegalsuite.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailegalsuite.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c65e6ea-7b6c-5c11-a1b4-cfb74f4252f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ailektronix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailektronix.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7d79649-9deb-59a0-9a35-97990a3c3747","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ailianwanzhengbanzaixianguankan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailianwanzhengbanzaixianguankan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c43d3988-b2a5-571f-b40d-5aa97fb80b98","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ailightwise.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailightwise.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4729c2e7-1331-5337-b7f6-5ba6f515c2c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ailineachata.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailineachata.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--539a7e32-48f0-59a4-8774-fa9e2964e144","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ailiontrustlimitedbot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailiontrustlimitedbot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b708977-60cb-58f7-a85b-4db13e6b97c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ailogicfetch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailogicfetch.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b70b3686-2c60-5cae-817d-732e5e343316","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ailogicframe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailogicframe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca0f96cb-f8ab-5e33-b46d-b00cc01d8c42","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ailogicmatrix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailogicmatrix.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e63c0dc-963b-549b-b6dd-0cc3aa91d747","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ailogicmesh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailogicmesh.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7de59a1a-8b03-58d0-a0bc-e54e2ad6405e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ailogicnest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailogicnest.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fc37167-170b-5405-bdff-20ac929c94dc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ailogicpod.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailogicpod.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cee81cf0-c22e-5c28-8885-fecfee776ed0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ailogicscale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailogicscale.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e6368d9-a2ee-5d22-86fe-9efbaab5b61d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ailogicvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailogicvault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30ebf50e-d4db-528e-a8a9-570c0d651680","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ailoogicbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailoogicbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--392016a5-4d9d-5fe2-9b0e-d05f2de3f89b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aim-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aim-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98d10611-459e-5e12-b731-ad6541dd3723","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aim-crypto.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aim-crypto.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81c2f71b-eb5e-559e-a1d2-1bac73405ccf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aim2attain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aim2attain.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5547bb87-0e61-5fc2-bf7b-4a1c7820da8b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aimagecdnabc.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimagecdnabc.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b31a0d5-923e-5206-8971-69f452fa7a59","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aimanhattan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimanhattan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd527ffd-4957-56ce-bc35-375ac601663e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aimanzhouli.skin","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimanzhouli.skin']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca3369a-01f6-5c6b-8669-1889bb7b9273","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aimatrixbeam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimatrixbeam.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd4d7023-f439-5b92-822a-3f919eb26461","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aimatrixcast.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimatrixcast.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1bc8e88-425a-5485-b22e-2db39cdfc946","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aimatrixcore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimatrixcore.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6125a222-f934-585a-bf15-2587d15f2080","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aimattressmate.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimattressmate.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a410aa2-2f20-5319-bfa3-ab0259ef7f73","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aimaxkanzlei.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimaxkanzlei.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a786dd6a-5e6d-5a37-ae14-034634266b34","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aimediapath.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimediapath.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18a99f30-93f1-5bb7-a60a-c8c513e8cd35","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aimediawise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimediawise.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c0ad8bb-fa4b-5641-b0e8-918a4c97bf49","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aimemetokens.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimemetokens.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38cfdc1e-21ab-525e-b12a-d0efeacb9a13","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aimetanode.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimetanode.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6300bcbb-acc0-5489-84c0-644f1be9a103","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aimindbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimindbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b114847-d66e-52e5-af8d-120bec274475","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiminddock.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiminddock.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91bbd47c-7f49-55c0-92af-a8f221dfcc19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aimindfarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimindfarm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22fcd441-3a71-56b3-9d25-3f8d1017e95c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aimindgenesis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimindgenesis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4187b77-18d6-5157-bf8a-14af7e495f63","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aimint.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimint.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66539962-384a-52b9-b5e3-106e75178c41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aimintbox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimintbox.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b395d3d8-487f-5300-abdb-08dab415da7c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aimirrorwise.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimirrorwise.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33c06975-dfb2-50f6-ba35-3e6f05b55eec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aimlessessays.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimlessessays.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51d058b3-6f7a-55a9-8f05-cde41c894341","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aimodeldrift.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimodeldrift.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a6e0202-847f-57b2-9cd9-2c8943088ffa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aimodelrun.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimodelrun.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88cf882f-13d0-5c6b-ab90-fd7205c4ce17","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aimswallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimswallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82788e01-b2e8-5566-a916-17f25675125a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ainaattrading.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ainaattrading.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb9d7ef4-34cd-5dd3-bf5f-e9c32fb4c26c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ainabkoifcs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ainabkoifcs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef5e1bcd-9925-58fd-bdd9-71358dde2ec9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ainanabanana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ainanabanana.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--313dc79b-f081-5461-8b8d-b72206bf1d42","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ainetflix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ainetflix.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d356088-69d3-5783-bf6b-20bdc351fb77","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aineuralbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aineuralbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3924250f-7517-57c7-85a4-aad9f22f570e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aineuralfabric.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aineuralfabric.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a95eac-21ea-5be7-9ad7-f961421e2050","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aineuralforge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aineuralforge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e20626eb-67f9-5586-b3d2-0c4450941766","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aineuralinference.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aineuralinference.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0917ff9-d212-5b53-981f-ab67900b69ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aineuralline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aineuralline.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b2315b1-cd35-5f32-bcd9-ab0824d1ca43","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aineurallnet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aineurallnet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63186cfd-21fb-5340-a02f-7f2f7b3fca86","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aineuralnex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aineuralnex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1556c71-b633-547a-b0cd-5624038a188c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aineuralpath.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aineuralpath.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e238351-ab03-5b38-bbdc-1e8ac4f9dcd2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aineuralpulse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aineuralpulse.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fedbad76-ce7e-5deb-a6b7-afe9fb5a7e99","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aineuralquery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aineuralquery.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e667b649-b968-5f14-af41-4399c34ec25d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aineuralscribe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aineuralscribe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faa0c620-676c-5b4f-8e13-d934ea2fabb8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aineurodeck.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aineurodeck.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9ed6bfb-a50d-5a50-82fb-0e8bc1edfe49","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aineuroloop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aineuroloop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d78e1d5-3d19-5436-b704-2ef8b811c1e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aineuronspark.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aineuronspark.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6edd578-c3d9-554d-aab5-870b8ee450f4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ainewlevelwealth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ainewlevelwealth.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99ceb3c0-287a-59b2-9661-60a54559450d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ainewmanabi.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ainewmanabi.digital']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ab8e0ad-7ffc-5d2b-affe-d1210203cdc7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ainexorasystem.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ainexorasystem.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--370afece-bbc0-57d5-9afb-802661eb5068","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ainexusbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ainexusbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37df9814-d0b2-58e4-9f77-7fccd08b145f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ainexussync.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ainexussync.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec5ed830-4cff-5e64-98a7-291c81162d4f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ainnco.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ainnco.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfc021a9-8634-5a66-9d4e-d5ec72dc82f4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aintegrate.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aintegrate.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c2fdcd-5036-5e75-baea-8a932f12719c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aintthatarttattoos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aintthatarttattoos.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e44445dd-89b3-5215-969d-253918ac3df4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aio-suite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aio-suite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c544da13-6615-5e8a-941c-fcc9a9c4ea71","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiomarketingsuite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiomarketingsuite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22c031f-fa12-519a-949c-f1945b2a6c10","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aionedev.best","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aionedev.best']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94a3eec5-ae4c-5e59-9452-3af2838a772b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aionixclaim.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aionixclaim.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--671983ab-cc85-535c-8bf2-6477969acb6d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiontrust.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiontrust.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--666061d0-8139-55d1-b797-7457a142cdff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aionwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aionwallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f295715-afaa-5861-a8a7-25b59eafd440","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aionwallet.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aionwallet.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be026840-84e6-5596-b7f9-01ec60918f6f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiopensea-box.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiopensea-box.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef5a03b3-4892-5a2f-8963-467a7b53f8b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiopoxtrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiopoxtrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0f3ee9c-9766-50a3-b472-a181dfe2fbca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiopsuite.tech","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiopsuite.tech']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a420e727-3344-55d8-a1ac-780ae442e9f4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aioutlook.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aioutlook.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af805e2e-c36c-5271-8235-b290ea0cdbb8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiovenwise.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiovenwise.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aad99d2-3a46-52a1-b833-481d833c0d8f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aioz-wallet.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aioz-wallet.network']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4532fa82-57f9-58cb-a186-39e290e7a67b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aipanzhihua.makeup","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipanzhihua.makeup']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a293b8-2e82-5b79-bf4c-d83fa32c296e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aipanzy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipanzy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e605889f-a77c-56dd-9fa2-c743dc5c7316","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiparadigmmodel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiparadigmmodel.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f0753c1-73e7-5fb0-a3cb-51ffd6f6b486","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aipathforyou.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipathforyou.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf4ac99a-29ec-585c-b774-72d81f7a0049","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aipatterned.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipatterned.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--903ac76a-ae40-5b43-8c58-e443e6375745","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aipatternfinder.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipatternfinder.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69dbc035-f206-5e94-82ca-8fb6f0679cf6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aipatternscan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipatternscan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4aacc65-dcae-593e-8dfd-a1101e6cf926","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aipbridge.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipbridge.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c670790-a610-5d8e-aa82-4a21ae8f7cac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aipepe.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipepe.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d08e7dd-e717-5967-a6ef-45c7867ef8ea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aipians5.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipians5.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2abf970-57b2-5417-b20f-e317934e3d45","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aipixelepoch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipixelepoch.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b89891d-f857-5aec-a270-bd68fe33ba26","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aipixelflow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipixelflow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93f77806-d702-5352-92b7-e22c5a26fec1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aipixelvaults.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipixelvaults.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6274ee8a-8a38-53f9-b049-1a5a366c37f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiplatfor.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiplatfor.digital']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de8af13f-6bec-5a89-bda1-24fd1c945fbd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aipmfirst.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipmfirst.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56aaab01-647a-5bc4-9d43-f2f026540c50","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aipnft.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipnft.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7855a1aa-670c-51d7-b94d-bd0ba0645e91","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aipowerrevolution.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipowerrevolution.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--680c948c-2119-5c86-8f01-cf81b23e33c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aipredictai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipredictai.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48016630-6d1c-5dc2-ac80-393867b4fb97","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aipredictivecode.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipredictivecode.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9639e4f-170b-55ad-aaac-d6bff7a5a3f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aipredictivecore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipredictivecore.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c863fd04-fbcf-57bf-912f-61c73c9a60ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aipredictivesystem.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipredictivesystem.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c606cb-675e-5c76-80da-3bfbcda578a3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiprimego.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiprimego.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c0231f4-5c20-5a51-80db-fe4987754de9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiprocessalchemy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiprocessalchemy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0284f6f1-a200-5ee5-b568-e28eeac14fab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiprocessnexus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiprocessnexus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--050fe850-b711-5b52-831e-0e8607ef932c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiprocessvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiprocessvault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56e2be1c-583e-5e3b-9bb3-042985fb29a1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiprofitwise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiprofitwise.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb86cc9a-3592-5e25-be94-e98f7d538e02","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiprompttask.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiprompttask.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--869b9d06-9216-507e-ad87-8845d0b5b33e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiprotocolmesh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiprotocolmesh.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f4cc683-37c2-5953-a142-15e7e0401359","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aipublictrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipublictrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87b85981-8dff-51a5-a43e-7fa00b4f7393","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aipublictrust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipublictrust.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77d9b149-9cf6-581e-8acd-ce54f16b70d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiqantumsynapse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiqantumsynapse.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54b4b397-eea2-5b5d-aaa2-21a72f0598b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiqdhl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiqdhl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44200947-dac0-58a8-9ae4-167b64e5ebd3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiqiumadoujuguodongchuanmeizaixianbofang.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiqiumadoujuguodongchuanmeizaixianbofang.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10850821-f0b9-51e4-b92f-bdc262c2eac4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiquantumorbit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiquantumorbit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ee89761-995e-5997-8db0-601aadfa9731","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiquantumrelay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiquantumrelay.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b08add8-5a6a-5913-9038-184e66259125","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiquantumweave.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiquantumweave.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a582b17c-ad1d-5b56-843a-415332fa82e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: air-base.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air-base.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e09413f5-bdf0-5e62-b5d0-f9db23a6665c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: air-base.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air-base.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a9da273-b62a-58bb-ab06-381301f3cc67","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: air-conditioner-repairs-near-me.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air-conditioner-repairs-near-me.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daba83ff-9271-5020-8d82-2516ce556fb8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: air-conditioner-repairs-near-me.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air-conditioner-repairs-near-me.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce3774ca-9e86-50b4-8b35-521cf57db0be","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: air-conditioner-repairs-near-me.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air-conditioner-repairs-near-me.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69f0a102-444b-5596-b76d-0a157f50a213","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: air-conditioner-repairs.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air-conditioner-repairs.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39174a50-2ee6-527e-9aa5-3aede5f25975","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: air-conditioning-repairs-near-me.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air-conditioning-repairs-near-me.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b52bee21-e755-550e-a809-2508cb0dd578","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: air-conditioning-repairs-near-me.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air-conditioning-repairs-near-me.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d23f57b-3a13-54a9-9ce4-f6e6d3a12461","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: air-conditioning-repairs-near-me.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air-conditioning-repairs-near-me.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b105e9d7-fb1f-5086-91d6-2e6ef954cebd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: air-conditioning-repairs-near-me.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air-conditioning-repairs-near-me.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77382be1-cf3b-5b2d-9f99-a40adb31e575","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: air-connect.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air-connect.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02d4a132-3114-56bc-820e-4a41ed036e56","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: air-force-base-near-me.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air-force-base-near-me.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3106887d-efc3-5eb4-a011-c1ad49719908","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: air-force-base.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air-force-base.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3497528b-55c8-5320-acf6-7ceae9b60092","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: air-force-bases.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air-force-bases.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11319732-b627-5923-861b-41129b997018","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airastbercore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airastbercore.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16abacbd-4f0b-5307-87f9-5c480eb828b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airbaginjuryattorneys.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbaginjuryattorneys.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16821de5-d4bc-5055-9580-c7e40f4497aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airbagsforavalanches.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbagsforavalanches.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93b88394-469a-5ae2-8f59-bbf5bb733e02","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airbase.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbase.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34253dda-6970-5b47-944d-b4cf4128a0c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airbasecoventry.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbasecoventry.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46f19f47-5ad4-5ad0-bf08-9c195ee6983f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airbasepropeltowingroadside.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbasepropeltowingroadside.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b26fcc2-6db3-5f89-ab3a-f0331cb411fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airbedinabox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbedinabox.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e4966e-893e-5aef-9056-69e460d5d8b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airbridgecargologistics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbridgecargologistics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e93a2e56-24fd-513b-bd13-1ab1e7a4c04b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aircannabis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aircannabis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa25f0cd-e9f0-593d-9180-30fc3feb8d5b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aircaredallas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aircaredallas.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37a92b70-0354-58e2-9e0f-898d00965f4d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aircogroningen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aircogroningen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ce64671-4f22-533e-b69e-d7c25ac1cb13","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airconnect.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airconnect.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51c67c67-ede1-5ea5-ac20-176804ad9548","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aircraftairliner.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aircraftairliner.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f6bb733-e23f-59b5-9a1a-e9a61542e848","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdop-walletconncect.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdop-walletconncect.network']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8649803-2e4d-5fed-a73e-97ac5e2c9208","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-alexbecker.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-alexbecker.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c44a58c-722b-58a3-9b37-4fbcf1d513bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-alldomains.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-alldomains.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8d9a886-8d06-55f7-94c7-cb49df494262","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-babydogepawscoin.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-babydogepawscoin.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12e94451-bd21-5283-990b-80c91915f4b9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-babylon.foundation","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-babylon.foundation']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7900817-f505-52d4-bb43-aecce02e1088","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-babylon.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-babylon.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--409b45c9-a862-5307-9e9e-30720cc71af8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-bonkcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-bonkcoin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dd84f63-487c-5c82-bd7d-da9af0e4f6ef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-brett.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-brett.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c689c679-bdf3-5a90-96b7-bc3915eb0355","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-brettbase.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-brettbase.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--605bac58-be97-5e9a-91c1-f9bf84f70fad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-brettbasetoken.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-brettbasetoken.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfaa1d7b-2ea3-5bf9-85d8-b28e3a6c83f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-brettonbase.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-brettonbase.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b2dd7df-f4d3-5f83-9140-10f7230fd308","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-bullamascot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-bullamascot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0113e898-c08d-5ed5-ae8f-1f37fb581730","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-center.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-center.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1617d024-cf4a-5797-9fa7-70c1dfb27440","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-claim.foundation","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-claim.foundation']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--962da481-ec35-5219-afdc-551e501c5811","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-claimsmagiceden.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-claimsmagiceden.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcbf43e6-afdb-5910-84d2-a9df8053f8b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-dashboard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-dashboard.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0c5fc00-0b2e-5bfd-a271-29df2f94cdc8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-dawninternet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-dawninternet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a367af9a-0e2d-5202-8ef4-fde9fe82b59a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-dev.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-dev.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4e3bba6-a09d-5dc0-ab77-3821e47bad49","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-elderglade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-elderglade.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34b1004d-a25b-5ee0-b022-a740ef9056dc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-elys-neltwork.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-elys-neltwork.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74edb951-60bd-5582-8d6f-91bfb3053595","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-elys-neltworks.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-elys-neltworks.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07abbf09-7222-5468-b104-84a0bcf0c6f4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-elys.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-elys.network']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0bb3172-e85e-5274-9627-758d0d2b2256","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-ethereum.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-ethereum.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9d60fc4-daf3-5c9e-8bdd-07ca634a6ead","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-events.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-events.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f41a80da-5e28-5d76-a3f3-902aa964f09a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-fight.foundation","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-fight.foundation']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76e2730a-0991-519a-b953-082d72e5c1e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-floki.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-floki.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af9a2a42-168a-50e5-84a3-aaddcc620fbd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-goatchan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-goatchan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aae72aa-390c-5fad-85e0-120b6d3e4f09","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-goatchan.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-goatchan.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbf5c821-3252-5b7a-8432-106216eff05c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-goatcoin.space","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-goatcoin.space']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49d4884e-3066-5bdb-aa1a-d1cf764d7d81","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-gomdori.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-gomdori.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2b4a1ff-71f6-5633-9283-e7a4ad1bb592","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-guru.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-guru.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da7a9069-30fb-5d43-ae12-86fa7274f3c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-hmstr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-hmstr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff490f98-6fbf-5385-9c44-2578d505c43d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-hyperliquid.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-hyperliquid.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d96a480e-e9e4-5384-b388-37c440488cc9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-injective.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-injective.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d0c9012-a87c-5da2-9f76-93f6721bb03b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-layeredge.foundation","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-layeredge.foundation']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6aa72bf5-4f4c-598d-9287-69cbb5c3ea81","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-layeredqes.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-layeredqes.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b42760b1-f63a-564c-a807-647bd66f54bb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-loopedhype.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-loopedhype.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6938c9a-dc79-5d30-aaba-109289215972","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-lunchpool.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-lunchpool.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--592cd743-cf62-5e85-af8d-c00dd952c82e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-magiceden.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-magiceden.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2d179bc-da2e-5e08-8f45-be8dada1ee44","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-magiceden.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-magiceden.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e932f4c2-d4fc-5ba1-9faf-514330f3859c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-master.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-master.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a8945ba-9f08-5290-9a86-86e2c82bcdb1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-metastreet.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-metastreet.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--938e8f52-c0f5-5ec2-9dcd-648df3e95e0e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-midnight.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-midnight.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8393f09f-87a7-5006-9597-e4a637970da7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-mitosis.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-mitosis.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0004a46-3d6a-5022-bdcb-38f71790a4a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-mog.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-mog.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--421a5696-9428-5b22-9e65-5defc839e5ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-moka.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-moka.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45f506c5-593e-5122-a74e-354c36efa741","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-movementsnetworks.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-movementsnetworks.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39b3121d-3984-5d65-af46-5ed46d257ccc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-myxfinance.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-myxfinance.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da77882b-b719-59cb-956e-bed121f7c70a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-no-funciona-cte.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-no-funciona-cte.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e02b0470-b205-5274-84af-06ff2f579ff5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-ondo.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-ondo.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e062ebaa-a40a-57ac-bffa-60de9dd6e390","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-ondofinance.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-ondofinance.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15df4d1b-039e-5298-b1ce-368adc896f82","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-owlstake.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-owlstake.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--825f0fd7-2a9d-5c56-a58f-39b323de0bb0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-pawstoken.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pawstoken.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e02c1bbc-e604-5721-a0a4-e433fba5c898","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-pawtoken.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pawtoken.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--199e0351-e4b3-5e7c-8b30-3cef25a759e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-peipei.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-peipei.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b2a5f1-55db-51b9-b382-6bc2f0e07335","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-peipeicoin.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-peipeicoin.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fa7e9b9-c10c-58b3-aa57-54b53bbe8041","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-pepe.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pepe.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6e8c836-1717-5b12-9f05-c04a4be16d26","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-pepecoin.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pepecoin.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--717405b4-9c85-570b-9817-30c41f5414d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-polygon.technology","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-polygon.technology']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00dfae75-c4df-5e1b-a446-2007fb11994a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-potionalpha.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-potionalpha.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03dfa595-4590-5371-b865-2fa09d861d2c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-pump9.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pump9.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fe24b85-0335-5f80-9320-56f4fdfae40a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-qubic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-qubic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfa58a8a-dc10-5273-bcef-35317d364ede","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-redbrick.land","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-redbrick.land']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21a8a48a-c97d-5fcc-aefa-2933f4979abc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-reddios.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-reddios.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bbbc30d-7eab-59db-bdec-50b476b30dbd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-rektcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-rektcoin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52b09bb6-96fa-5114-a9b2-a207acccce3b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-sign.global","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-sign.global']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6abfddea-b8b6-542e-9351-6fbd985f891e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-somnia.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-somnia.network']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25ea6b6a-7258-53b6-bc38-febecb9d3598","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-soneium.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-soneium.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0098380-c268-5b29-a1ee-f19fce5b9938","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-sonic-game.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-sonic-game.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--affed961-40e6-52b3-9b8e-560dbc551277","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-sonic.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-sonic.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd0abd4b-ed2f-559a-ade5-0baf811c63c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-sonicgame.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-sonicgame.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed39e4be-e44e-5140-8758-a10f80b10bde","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-soo-network.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-soo-network.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12afd7f5-97a6-5e46-9b95-1dfdbdb6226b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-sophon.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-sophon.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b5b3c3b-2e96-5050-a31c-4a43951cccff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-sophon.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-sophon.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b87f9ea0-e86e-5057-a885-2d0c1f327b9f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-spx6900.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-spx6900.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--025b0f11-7746-5ef8-b8d1-1df03ae6e778","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-starryniftart.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-starryniftart.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85ce33ad-e134-5437-b843-70a99b9c7c62","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-taikoio.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-taikoio.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c749cb56-1d0f-5edb-8aab-88e65461f393","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-taikopro.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-taikopro.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b43f829-4cea-55c7-a835-4817351b0a09","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-testmemefoundation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-testmemefoundation.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97ec95a4-2c61-5ae6-86db-3a0dfc25d7c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-tg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-tg.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c1e5778-e0ac-5654-814a-c132dfbbdcb1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-thrusterfinance.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-thrusterfinance.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6114516-b5d3-5d63-983b-5168a24d295b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-toadsol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-toadsol.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bc1a17e-131e-5128-88e7-a9fb06b106c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-user-degen.tips","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-user-degen.tips']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28a26010-4458-55a2-962d-adcfdd7ad5b9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-vaderai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-vaderai.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8207c21-e078-592b-8b3a-40a3360d62de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-verifyb3.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-verifyb3.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae62acfe-18e5-5072-ba68-b48c66cbdbec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-waletconect.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-waletconect.network']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ccb8315-27c7-5bfe-a52a-1e3ac55f5af5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-waletconnect.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-waletconnect.network']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0806d92c-666e-5a5e-b7a5-6e9c08789ea3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-walletconect.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-walletconect.network']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4960f4-2a2b-55d7-809f-36a1e0dfa4ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-walletconnect.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-walletconnect.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58a19f48-4dbb-5326-8e91-8581c2317071","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-walletconnect.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-walletconnect.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fa20832-accb-53da-98bd-5b05eda49e61","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-walletconnects.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-walletconnects.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--773a9ade-2a26-5dc3-b066-ee5e98d03e3c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-wallstreetpepe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-wallstreetpepe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f0f56cb-0a69-58ec-baff-eb477c9382de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-wlfi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-wlfi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f3c840c-8aec-52a3-a656-6adbaad77c3b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-wlfi.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-wlfi.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf3fb144-0fb9-54b0-aac8-31468742d7b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-workx.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-workx.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01d22353-ffc9-5901-b262-b0e899655ed0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-zebec.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-zebec.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b8b49e2-2b1a-549b-9926-390b71a7d13e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop-zrc-claim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-zrc-claim.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f88f5e5-7d85-560c-95d4-13a21629f4aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop.blog","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop.blog']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e452d24-ef45-5cb3-8c8b-76eb7bfa93e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop.box","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop.box']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--095df0ce-dec7-5501-9565-c9e6267f0492","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop.center","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop.center']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf7dff5d-2fb5-5162-a77f-7e0801074444","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop.directory","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop.directory']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbddd985-ec50-5959-80cd-90e326fc3c24","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop.guide","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop.guide']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2093023e-d44a-56cb-8e8e-0a5abf82e779","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop.marketing","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop.marketing']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21943d18-12b7-5a9b-ad2c-cc8ef418a698","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop.report","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop.report']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68e0fc28-522c-5a2d-a3d8-84de73c58af9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop314.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop314.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0e20577-a276-537c-8ba3-9ba000bc25e6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop6.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop6.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc6dbc98-2519-56e0-be37-d34cc5c2f537","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrop6net.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop6net.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2b9d96a-9279-545a-93e4-4805811abd51","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropalerts.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropalerts.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7fa666b-61b4-51d8-91a0-42702547682e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropalerts.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropalerts.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c5cd2a4-f45a-5741-a233-0f3e76a8f2f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropapp.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropapp.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--508b3073-2a1c-5999-add6-f96e59ef45c4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropbabylon.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropbabylon.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2e73b2f-12ba-5dbe-9024-2ca390cc0f5d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropbinance.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropbinance.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aae9d45-32db-5dd9-be27-71d9bb95c3fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropboost.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropboost.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e611b2d7-a2ee-53c7-8b92-ccc5c77cee39","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropboundless.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropboundless.network']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd3d97b8-824c-5f64-b4d3-f18ba8806e63","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropchecker.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropchecker.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78008456-e824-51e1-acd9-a16780502bd8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropclaim.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropclaim.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1537e25-1815-547f-9ba4-1f6b22323d70","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropcloud.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropcloud.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5eb3dfd-2c87-52f7-8c5d-a51fdb50f766","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropcoin.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropcoin.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1ccb1ad-6fb2-5195-9851-91cc7e61125d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropdaddy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropdaddy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5b9ed47-eb8f-5b51-935d-e793bfe05f3d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropdev.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropdev.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--172adb0f-069f-5ef5-83bd-adc2a106500f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropdigest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropdigest.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d61b2512-694c-5f13-96ec-b746b7446cbc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropdirectory.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropdirectory.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e79a0306-2e1f-50ad-ad67-1f02a92b81fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropenergymemecoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropenergymemecoin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a71871b-ccdf-5814-a0f1-25c2573e4483","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropfa.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropfa.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14202fa9-6c7d-5746-b49a-c7ce098f59aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropfindr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropfindr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20607633-bf86-50e5-94eb-4b9c9cdd1de0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropflare.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropflare.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59bf57e3-b091-5398-92f3-64241d474ed4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropflow.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropflow.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceede96f-b69a-556b-944d-bfa681693cdd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropforge.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropforge.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54266fff-9393-5770-bd27-4982e03f221c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropfuel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropfuel.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e2d8fa8-015b-51cb-939a-25694211455b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrophub.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrophub.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b494ebb5-79b9-54ca-bdf9-dc41fee53267","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrophunt.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrophunt.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d9e0091-1530-52b7-b7d6-7cc4ce1f1413","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrophunterx.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrophunterx.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c7725e8-2d5b-581d-bdf2-6d3e55f297d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropinfinity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropinfinity.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b224ce61-d464-5f75-882a-f760977586be","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropinitia.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropinitia.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--372c79cf-2f57-5c17-a2c7-5b82ae34bd5f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdroplayeredge.foundation","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdroplayeredge.foundation']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c92a931-2507-5ddf-8ad0-0805593ce934","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdroplisting.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdroplisting.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2572f682-d14b-57eb-9015-69db5d88c5fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdroplon.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdroplon.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae902409-20e5-5309-952d-8895d3a1ac4d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdroplon.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdroplon.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d95b7097-3272-5910-bdf2-0d645f6dfe7c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropmaster.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropmaster.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--277ff521-18ef-5722-8e79-a10e349b6070","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropnews.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropnews.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b77c7b4c-7ab5-53bc-9fef-a1e3095bccc1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropokvip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropokvip.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6900a136-076c-5bd8-9dca-11943fbe5a03","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropoptopia.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropoptopia.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ca74920-b2ed-5aa6-9992-2593dd65308b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropperx.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropperx.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d8f1564-c1b5-566e-9700-11e7bfce58be","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropplaza.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropplaza.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec604c10-2d87-5d4f-bae0-3e389a08bea7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdroppodcast.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdroppodcast.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6bf9f60-7d73-5a67-a930-a1b04ac76b4f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropradar.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropradar.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0675373-026b-5fa8-bd8f-82546d560b00","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropredbrick.land","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropredbrick.land']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c7e8c3e-234e-5a9d-bac2-672c1e77025f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropreddio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropreddio.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9703d004-e938-50b2-a60c-7e5cf15d2fec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdroprefunds.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdroprefunds.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcb0344a-1aab-58b1-986e-056fe8823a0c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropremittix.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropremittix.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1443e621-934a-5f1f-ab17-849fa4bb0af2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropreward.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropreward.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9a9cd20-3fd8-545b-b718-ba64c893c720","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdroprush.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdroprush.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--727af8f8-77d2-5309-8f61-22e234b7344c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrops-aethircloud.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-aethircloud.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b46d249-381d-5daa-a3b7-8e641670dd4d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrops-ice.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-ice.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a8674c8-353a-52a5-b2b8-9fa95061fc2d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrops-icetoken.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-icetoken.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af1abcae-7326-5701-8428-d97b4f983d73","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrops-initia.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-initia.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e1a6297-826c-50eb-b2ab-bb21ca97a43e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrops-initla.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-initla.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35c77ad0-8ccd-5211-9f56-41ad0b9a4bbc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrops-mintschains.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-mintschains.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b726bbcc-915e-57ea-a651-ff197a847d85","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrops-ondo.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-ondo.finance']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c925aee2-d698-5417-82a8-74965a6695d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrops-onyx.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-onyx.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36813182-bcb6-5620-a417-b8fd1df002d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrops-pawstoken.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-pawstoken.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74908822-9f7b-54a7-856d-851f6e581896","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrops-peipei.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-peipei.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a44df6bb-88c5-5a49-83df-92c11771656a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrops-pepe.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-pepe.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed7b3828-0051-548a-b540-fb92971817b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrops-pinetworkcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-pinetworkcoin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e49f2eb-a2cb-5c60-a015-1eab6f018236","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrops-vipselection.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-vipselection.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0085fd1-f143-5bfb-8548-34dacf5ed3d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrops-world.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-world.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2ca67ef-a678-5f15-bce8-91b9da33faeb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrops-worldcoin.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-worldcoin.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d918f7ea-4dd8-5270-8007-5ad60b075b3c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrops.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbd16b95-a549-5e0d-9108-7d6627e2840c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrops.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a32b7f3-2b1d-5f70-aa03-664e9e02054f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropscanner.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropscanner.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1306250d-9732-527c-912f-548b03e9c651","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropscannerapp.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropscannerapp.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0699e949-08ae-532a-bfaf-1efe1e44bfab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropsea.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropsea.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38d03ade-46ed-592e-bd9f-c4d11f95ab79","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropsecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropsecure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fd57151-42af-52a4-80e5-c3b919a40de8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropsether.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropsether.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0ad1d29-e390-57cf-a444-2089b7f64bed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropsfinance.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropsfinance.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21d39db6-589a-5518-a493-f9083bb9287b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropshunter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropshunter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ec7f25a-99d2-51cf-9975-25058e0b4639","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropso.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropso.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a303a111-aec0-59a7-828d-0a6c78e5b2cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropsonic-labs.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropsonic-labs.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--217dcacc-6740-5d5b-bea1-f96d6a865e3e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropsonic-project.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropsonic-project.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ccac4fd-6f90-52b8-8111-c088e0994846","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropsoniclabs.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropsoniclabs.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--426640d0-6301-5e8c-b00c-049dc1432e89","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropsoptimism.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropsoptimism.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6e37304-e2cd-5adc-8285-95432a752e3b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropsweb3.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropsweb3.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8890a931-7647-5ae7-8e94-c3132a431ab6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdroptelegraph.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdroptelegraph.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0dba577-2c80-5693-81b4-0129be9b9b3e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdroptimizer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdroptimizer.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6050889f-d4aa-5973-b3e5-463395bef45d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdroptoday.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdroptoday.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71644965-db8d-5339-8891-0563ffd485af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropton.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropton.network']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b2fb6f8-007c-5a8c-847b-7455d4f52543","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdroptrumpcoin.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdroptrumpcoin.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a41eaab7-679d-5310-8922-c6cdd66dfe71","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdroptudonghoa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdroptudonghoa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5973e5dc-3508-5676-b847-04a9e57acc9b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropverifyb3.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropverifyb3.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fc85c26-249c-5743-b717-148f69faf84e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropwaletconnect.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropwaletconnect.network']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cc3815d-6c66-56b9-9ecb-be75737affd9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropwalletconect.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropwalletconect.network']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4123275f-ef9d-5aeb-b465-98091e1f00db","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropwebs3.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropwebs3.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1466d5c1-c450-5a5a-bd62-dec65d0e7d4a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropx.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropx.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c79b91c-32fe-5ed3-8f67-c3dc8c15b024","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropxl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropxl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfd18be2-f281-5b07-94d8-a9e1d71077c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropyala.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropyala.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--299daf3b-e7d6-5f74-9aaf-eb13e28da62f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdropzircuit.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropzircuit.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--039555b8-eaf3-52da-8619-112d632ab4b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airdrorp-walletconnect.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrorp-walletconnect.network']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c51af0b5-010d-55a8-8bc0-6b0ed99ac23e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airductchevychase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airductchevychase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--229dd76c-05f5-5446-ba87-c38e9da38d3b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airductcleaningambridgepa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airductcleaningambridgepa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb1776c5-6693-518d-ab78-28e6f4ffac7a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airductcleaningapplewoodco.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airductcleaningapplewoodco.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--461f4553-5d72-516d-a1cb-49d14bdad83d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airductcleaningattleboroma.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airductcleaningattleboroma.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04a39aa8-605f-5d17-8fc4-5a12e19ed04f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airductcleaningbosquefarmsnm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airductcleaningbosquefarmsnm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b660e386-347b-5a8e-9e09-05dded3cb91c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airductcleaningcambridgema.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airductcleaningcambridgema.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc531b97-5d31-5184-b8e4-d21e7d605a57","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airductcleaningchattahoocheehillsga.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airductcleaningchattahoocheehillsga.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59defe03-3d02-5bf7-97ba-70482c86b3cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airductcleaningfarmingtonut.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airductcleaningfarmingtonut.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f75db739-bed3-55ff-8303-ea5a690238d2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airductcleaningstockbridgega.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airductcleaningstockbridgega.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a9b8417-932e-5b8b-a126-9fa5af3128af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aireacondicionadomallorca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aireacondicionadomallorca.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ada21b62-58ee-528a-879c-1a3bd9c13cba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aireadinessassessment.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aireadinessassessment.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--587a3b7a-c4db-5555-a1b1-275b9374fa35","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aireadinessauditus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aireadinessauditus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cedf922-4ce8-58be-a0c0-380e1f5fd131","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aireallyworks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aireallyworks.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--badae645-15b5-53ad-b191-ee0ead293a85","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airevolution.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airevolution.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a711390d-6cba-5283-82e2-f49d10eae08c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airevolution.earth","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airevolution.earth']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5515ab9-c398-59a0-aefd-22f21e820ff0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airevolution.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airevolution.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--772b6bbf-a056-5008-b196-b9efd9e8c8cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airevolutiondao.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airevolutiondao.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--760fccd3-59e1-5ddf-be79-0538c6229f05","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airevolutionpro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airevolutionpro.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddb9c231-0449-58a1-a130-2bab0d028545","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airevolutionsuccess.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airevolutionsuccess.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2caa8f24-4fac-5b47-8b9a-65bf5b4c20d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airevolutiontoday.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airevolutiontoday.digital']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0131b13-144a-5f72-b8de-0480f0536faf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airfareconnection.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airfareconnection.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09535d96-f7c1-5bd6-952a-bc0d33dd2e51","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airingoogleadshub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airingoogleadshub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a62b3810-e2fc-5079-bc25-ddcac9695001","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airjordan4ssale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airjordan4ssale.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1ebfb66-7d97-5b08-93af-82915f8421eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airlinea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airlinea.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aea7e47-77da-5219-8fa1-264780de8178","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airlineaccidentattorney.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airlineaccidentattorney.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67e79ecb-7bc8-5b2c-bfde-0e0e84161b80","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airlineapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airlineapp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f47f53fc-7f04-5004-9f99-ddaff8b29014","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airlinespassagensaereas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airlinespassagensaereas.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c01283-f496-539e-b147-c41193f756fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airlinespassagm.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airlinespassagm.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20616817-cb0d-55fe-8985-7d8d29bbfb91","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airmattress.homes","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airmattress.homes']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9265fe7-b29e-5296-94c9-858a6308b76b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airmattresscover.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airmattresscover.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0c4508f-af46-55b0-96bc-9708d8f9405e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airmattresscover.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airmattresscover.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d97fbe2f-8324-5403-b4ba-f4fe94c3c483","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airmattresscovers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airmattresscovers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23a86043-2a9b-571f-b89c-4c789096eb07","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airmattresscovers.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airmattresscovers.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8299b8d7-7a85-502d-a1fe-7670d35db8fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airmattresstips.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airmattresstips.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f148b729-0a20-530b-afaf-83b70d276e64","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airmodamattress.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airmodamattress.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00efaef2-5b05-500f-9eab-d8650c520bdb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airobotconnection.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airobotconnection.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--643b408c-e8b9-505f-90d6-e870420c4123","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airobotforex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airobotforex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00feac00-f37d-5bef-8853-b654fa0046fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airoboticsdata.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airoboticsdata.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4604b7c-9927-5c83-8786-59f679679e6d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airoboticslogic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airoboticslogic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b94a36d-b319-5e05-b473-3c4f65c9016f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airobotmind.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airobotmind.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df01eb93-633c-5ddb-8230-ff8bff08dca5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aironeatticinsulationflorida.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aironeatticinsulationflorida.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f466c8c7-a0e2-5e6e-b49e-0a8153c8d9fe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aironin.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aironin.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--857d38eb-8d49-51a0-a35f-e248115541fe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airowlinear.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airowlinear.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8925377c-a478-5486-917e-24fd2dc0116c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airphantom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airphantom.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e61c47f-f43a-5f03-ad49-544624c9b816","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airphantomphoto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airphantomphoto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--125eb5db-3f03-544f-b3d6-da84cd07a75a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airportsecureparking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airportsecureparking.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eac11d3-2104-5e07-a41b-2b350a19fa44","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airporttaxihalifax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airporttaxihalifax.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b60716c3-4820-5e3e-a1cd-59b3cd42fc2a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airpressa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airpressa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58d59515-bcc5-5d11-9d78-723852f2d0e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airpurifierfirst.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airpurifierfirst.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98902d8d-07a1-5fe5-9fba-8528f572c907","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airs.email","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airs.email']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b407658-cdc1-5e9c-ae57-51d324ef931f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsafetyathome.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsafetyathome.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b9a8b3f-19df-505b-b69c-68722cae5ad3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsafetybureau.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsafetybureau.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bafe563-5fdd-5429-9c17-c02955fc1b9c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsafetycompany.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsafetycompany.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c51583c-95f1-5e02-a5c6-7fe2d9874438","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsan2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsan2.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--defb57ef-a982-5396-9ed7-1b7576d2783d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsaromatics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsaromatics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c44361dc-8094-5c89-9b2c-056c38bcaf51","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsastana.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsastana.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--813e5f8e-e43e-566a-bb93-28b8810d8bdc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsaz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsaz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04bae22c-51da-53de-97eb-666986754237","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airscapebag.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airscapebag.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0961a50-664e-5f35-9339-6629c13410b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airscentdiffusers.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airscentdiffusers.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6ffae75-4a4d-5df1-a6b2-d98e473cd167","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airscenty.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airscenty.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--966adcad-97a5-5720-a2a6-160c840dd457","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsconboy.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsconboy.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df5cb4af-407c-5058-b8e6-d5ba95448d0b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airscooler.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airscooler.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73da4ea6-3105-525e-8d56-129f4d763b59","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airscoopify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airscoopify.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d2dd091-0350-528e-9a3e-1983e4e64c8c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airscope360.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airscope360.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0c31e2-774a-5a80-8c17-190eed835937","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airscopel.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airscopel.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5f95e4c-11d8-5b31-b9c0-6c0d8c4a5f8c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airscopfy.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airscopfy.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f947311f-673f-526b-ade7-a49735c5cb32","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airscr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airscr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f004dfd-a112-5dab-a006-165f5679699d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsdrops-initia.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsdrops-initia.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b842400-1bc2-55d7-bcdb-e3108b780f31","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airseaint.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airseaint.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7c4a514-0853-55d9-ae6f-2f723ec68e3e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airseatcushion.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airseatcushion.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3d2ec02-e0e0-5cf6-a3ea-60019587e6d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airseedbeacon.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airseedbeacon.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84411422-dff8-51d1-bc5a-a9626e2749fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airseemsic.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airseemsic.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b42c36b-0dcc-55ef-9e4d-70a3c8c6c6b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsenal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsenal.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6761234-4253-59ab-a572-53c51185e2e2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsenseai.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsenseai.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbc5d027-7b8c-568b-a0b3-bc55ef8a0520","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsensego.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsensego.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52cb7e08-48d8-5e65-ae07-4b7aa25b3700","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsensehub.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsensehub.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--593da08d-a580-5d17-b8e8-181e909d5235","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsensehub.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsensehub.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b7bf84f-8680-5b81-8b9e-9b03154a4d4e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsensy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsensy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ef270dc-51ba-5c21-b8db-0b6b0a819c3b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airserbia.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airserbia.biz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--169e8483-74d7-5f67-a97c-5ec36a0591b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airserbia.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airserbia.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c84f3d8b-18f1-5a99-88c6-6b7b1d88222b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airservglobal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airservglobal.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c6cb245-6c56-52f4-997a-2d6e8993dd13","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airservicehvac.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airservicehvac.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--652798b9-a4a4-5dc5-9973-3127734cb86f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airshane.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airshane.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e67cfb33-12da-5d68-bafb-b71b16502cbd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsheadshvac.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsheadshvac.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--744bf5c6-511a-5998-92c3-872bcaaaff7e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airshield.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airshield.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a988223-c36c-5497-8e55-69b032f05eea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airshipbases.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airshipbases.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46458b4d-d740-5fa8-ba17-bc1602ed9272","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airshipbases.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airshipbases.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faf3c307-5076-5b7f-9045-6f82db3d59f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airshiphealth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airshiphealth.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--240e3a9b-77ed-5233-8874-9b574191104c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airshipland.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airshipland.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8078eee-d57e-5f90-ac24-a36c0ded5bc2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airshiplife.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airshiplife.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f647793-e514-55e4-9b3c-c5750febf0a3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airshipping.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airshipping.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab940feb-69ef-5f22-bab9-40d4bfadb431","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airshippox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airshippox.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81f77a2a-f8af-51ac-a54c-9b7c48d02cb6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airshipsatwar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airshipsatwar.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c20b311c-7497-5aa5-bc9c-4ccd0c527951","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airshipslife.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airshipslife.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11d66f50-9b88-5cf4-bcd9-34f89b438fd2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airshiptechnology.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airshiptechnology.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93c0cce9-d021-5bfb-9ca9-c4310f1c62f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airshockrep.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airshockrep.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aded4a4f-d2bd-544d-bc4a-1feab9db3a03","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airshoeshopnow.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airshoeshopnow.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--526aef8b-d714-5a17-9644-577bccc2b562","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airshotixo.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airshotixo.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c6802ab-7f02-5ddd-b3af-e6622b3c3d7f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airshotus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airshotus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b41ad09c-ebfb-5af1-8749-25ff81914bfa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airshowup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airshowup.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae061acb-74ab-5072-bcf9-3e954eefad55","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airshrt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airshrt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74ca35e4-fb1c-5ab3-a475-452fa1e32420","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airshub.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airshub.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf0ca524-1e21-52cd-946e-5163acc42a87","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airshubsai.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airshubsai.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f558700f-0456-50e5-a657-77af9e9ac22b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airshuttle.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airshuttle.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7dde999-6baf-5c89-ac45-6184b0f8e975","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airshuttlelogistic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airshuttlelogistic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50ef37a2-b43b-5521-8399-38e56a0840a5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsichuanairlines.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsichuanairlines.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0b6e931-420b-5999-80d5-df7a52a1f8d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsidebookings.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsidebookings.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca5c179b-d45b-5aa3-80ca-364ada9cdd63","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsidelnc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsidelnc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1afdc1c1-2782-5569-837e-e18306423a5f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsidesinc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsidesinc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c2a2aad-f0be-5e1d-957e-bc9d308a57e2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsidessolutionsinc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsidessolutionsinc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc3f722b-02d1-56b3-a25b-736f6202c8c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsignopen.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsignopen.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f55d2be9-5012-52f3-9964-69fac531f613","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsindustriesgroup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsindustriesgroup.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba21c2f9-18e3-5c4a-9224-571c69ae9a7e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsize.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsize.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b316457-e349-5eb8-9311-f0903fa60972","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airskid.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airskid.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bced4da1-4f65-52b6-8a9d-d63dd495f9ef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsky-anajpseruer.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsky-anajpseruer.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4caf5c31-6dd1-558c-9b17-16d22c1c8616","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsky-anamileageclub.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsky-anamileageclub.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4b73d7d-90c2-5c31-8f0a-6820a2976ec5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsky-ananonipy.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsky-ananonipy.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b229c8a9-1e91-516e-b9ff-f19f7cf12f8e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsky-maileagenorpy.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsky-maileagenorpy.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bd045b5-fed4-5d99-8c70-494030d33b88","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsky-nleropyana.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsky-nleropyana.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf61327f-179f-5137-a66f-b2e65cbf56bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsky-norplyserveana.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsky-norplyserveana.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03b554f0-1984-5ea6-a8a9-d543247f8f0a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsky-norpyanasuer.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsky-norpyanasuer.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f303de2-bab0-5718-988b-08954b1f314c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsky-serporyana.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsky-serporyana.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af66c21e-01f0-5b11-8fde-513b139ba367","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsky-servpyana.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsky-servpyana.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c163e12a-8f40-5a81-bb8b-8ab6ecb8cad3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airskyanacentip.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airskyanacentip.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0724ead4-db79-5326-8880-8f744ed153fc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airskylo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airskylo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24ca5adb-2864-531b-972b-a040f4154559","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airskymaileage.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airskymaileage.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a0c2df-b21e-5505-83ec-d0fd4c73b81c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airskymanufacturing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airskymanufacturing.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f08e8bc-3e20-5956-b68d-cb1fb5109a83","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airslabsais.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airslabsais.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--776723e0-6f2f-5d61-8f4c-b4870843ac00","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsled.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsled.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06cada27-b061-5777-8b60-e4bbc4c28f8b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsledror.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsledror.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--532c5496-0645-51f1-afcd-e12e8d418e16","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airslot123.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airslot123.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--455c40d8-8856-5b25-9aea-369784c4b1bb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airslot138.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airslot138.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74345de6-3e67-5b4e-931a-7b137f35f699","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airslot138.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airslot138.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efd4b0ea-4ab3-573a-b511-54f87c734849","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airslot69.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airslot69.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90f9de32-d2d9-575f-8480-ee812eda614c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airslot77.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airslot77.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a881df07-be92-5b64-83f6-ebdc8f3879d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airslot77.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airslot77.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea882e14-4280-581c-949d-df4cc21a6659","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airslot789.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airslot789.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b7f9b74-12ab-5699-a43f-9b2484822af6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airslot789.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airslot789.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af5e7127-e68a-54b6-993b-9e8c0c01765c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airslot789.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airslot789.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--447e89d0-642e-58f4-9702-0ce3a13c0e75","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airslot88.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airslot88.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77ad1bab-a3db-515e-88ed-3fa6f625f393","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airslot888.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airslot888.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0a311cf-69c4-50d7-904e-788358d21118","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airslot888.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airslot888.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efc205db-24a4-5ff1-839e-1689d66184a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airslot888.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airslot888.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3702122-b61b-587a-a142-1df7f1c90fb4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airslot88gacor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airslot88gacor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--decee61e-9d68-573e-b04a-3c043a68febe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airslot88gacor.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airslot88gacor.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bea6f91-d5ea-56bd-8b72-c39a90fe1d48","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airslot88gacor.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airslot88gacor.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12192634-e7f5-5a6d-8626-867fe03c84c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airslots.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airslots.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b747f8-b4d4-5f49-81f5-ccd2559ae952","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsludge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsludge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07a4f6c-5732-5c00-a70d-2ebed59ced2a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsmart.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsmart.digital']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0a33587-85ed-5af2-81c8-2336bd3879ec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsmartai.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsmartai.digital']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37581c59-64f9-504f-940e-cae89c8ed8cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsmartx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsmartx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98a9c21e-5110-5abd-83c5-350e867afd05","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsmax.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsmax.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ae468c0-0018-50ba-a390-c60ace18d0e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsmileage-anagroup.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsmileage-anagroup.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c102d359-99ee-55af-b93f-f6a8073ceee3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsneakershopnow.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsneakershopnow.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--357100fd-8e28-50d1-aeae-c1e0cfdf6ad6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsnow.best","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsnow.best']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21cef70b-3609-5940-848e-ea1fdab2431b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoar.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33cdb73-7a93-5f11-90e5-82639a7a1dc8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoars.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoars.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9813cbfc-16ec-5e4f-afda-ce5b7a5b02d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsockx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsockx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b95a86c4-43b6-564d-b991-bb7dcc0a417f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoft-belgium.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoft-belgium.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbb8ba08-1c2f-5a7a-8b7b-b5bb80887189","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoft-center.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoft-center.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--075c71b3-d80e-584d-bfe7-393ec0b79b49","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoft-nbd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoft-nbd.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75734e50-57f0-5c6a-bb67-a670943235f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoft-rider.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoft-rider.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5165972-f925-5123-a1b0-5f6c1d7c603e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoft-shooting.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoft-shooting.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd619b73-6b19-5eef-9586-f6339b45f55f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoft-sud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoft-sud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c3fc0f8-a5af-5d64-a989-8834cc7aa3cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoft-vision.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoft-vision.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13f9ddba-8c6c-5eb5-8ece-c546acb8c08c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoft.town","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoft.town']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2029d9a7-d2b1-584c-8996-abc968b7aef7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoft123.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoft123.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d022fa08-b6f7-50eb-af3c-da4efd123ba1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoft6.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoft6.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d27ff5ec-aa95-5f85-b53e-822dfa3b9402","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoftaccuracy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoftaccuracy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49195f51-86cd-5b6d-a5a8-391053439657","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoftalsace.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoftalsace.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f7f85bf-519a-5194-be3f-ecb2c5b2d1e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoftbar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoftbar.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52d7d98c-6547-51f6-a6ae-c7b9424ba090","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoftbbgunauthority.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoftbbgunauthority.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1a00313-d043-5396-b7da-e3f174b10adc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoftbrasil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoftbrasil.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f407341e-523b-504c-9ee3-ec8ee9a2bafc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoftclan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoftclan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba8b91d7-702c-5073-a2c6-fdc534ebb295","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoftdeva.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoftdeva.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--271577aa-41c1-50af-8efd-6a92420e7da8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoftdiy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoftdiy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--241133f1-d2c2-52bb-86f4-b3803b54c5fb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoftdomain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoftdomain.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78c86525-f99e-5b3e-ac8e-e4e6092c4bf9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoftequipment.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoftequipment.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--add324e4-933e-51d1-aa49-7163d423bb08","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsofter.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsofter.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92a46d7d-5007-504a-842f-586f554630e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsofter.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsofter.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45a14890-7707-517a-92bc-ba1501a4a755","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsofter.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsofter.team']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10c809da-8099-5179-a28d-53c9da3f2460","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoftessex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoftessex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b2ac109-a518-5fc4-9827-66ac3277779c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsofteurs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsofteurs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e740b15-f30c-587e-a944-7da3894d2216","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsofteventsbenidorm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsofteventsbenidorm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df782a2c-92f9-535d-ac2a-fcf8861226f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoftgunslist.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoftgunslist.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ea6930c-e3aa-538b-af03-bca9b207fd1c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoftgunsupply.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoftgunsupply.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15db2ea-9b42-5cae-b497-7bc267f6b129","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsofthandgrenades.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsofthandgrenades.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a761351-ff9b-5865-9211-a291b9152fb2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsofthobby.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsofthobby.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0e134e3-81e5-5d31-ae8f-7ee5915d5c0b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoftoptics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoftoptics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01c8aa09-5393-5c2b-9fae-231963441272","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoftpistolreviews.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoftpistolreviews.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc75cd4d-dede-5be0-b884-40196ced4293","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoftqms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoftqms.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68759dc6-a562-5b40-b821-2a1f1a810c81","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoftreview.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoftreview.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76a40e54-da95-5177-b3a5-be261488fa63","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoftsafetyfoundation.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoftsafetyfoundation.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c8eee7a-8fc8-5979-ac3d-bffe7d5df603","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoftserbia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoftserbia.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49015be5-c059-5cfb-ac11-f8150abd945d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoftstock.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoftstock.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--071ae794-47c5-53ea-bb39-51102cb161ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoftstock.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoftstock.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--085b3ce4-36a6-53e8-839d-b99dfcffb602","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoftstock.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoftstock.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97c7391b-ba45-5e2e-b14a-0af52fe24a62","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoho.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoho.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8e38d7c-f34a-5a70-8859-eb3ae58ae5af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsol.bar","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsol.bar']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96b3dd44-e8b6-564b-a0b6-70f660919aca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsol.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsol.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ee00be1-2c1a-510f-aacc-cbf16f256dbe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsolution.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsolution.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1c5d577-d717-5918-8bfd-6c47664b7085","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsone.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsone.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c08aa68e-88a6-5283-bec8-d304026dbee1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsonindia.in","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsonindia.in']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45390efb-3eab-5a86-9043-10553c91a740","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoundshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoundshop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9eb58b7-b85b-5969-8f6d-6fe835b4e7a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsowedding.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsowedding.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0413c255-53e8-52a0-8685-3e5a65cac7cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsoxduct.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsoxduct.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ba793a3-60c5-510b-a69a-81ed5886632e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airspa360.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspa360.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66bcc319-995b-5e2f-a4c4-62afe153fca9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airspaceapi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspaceapi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cfb1b27-3184-5f54-9aed-73c514bd629a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airspacecctv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspacecctv.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2a68bc7-b353-511f-b9ad-2fa3f62df80f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airspacecompliance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspacecompliance.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b0012f-3b9c-5118-81f9-bf892d4c2ca0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airspaceforce.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspaceforce.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3346cad2-f10c-501c-94c7-15d5306d2cc5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airspacegovernance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspacegovernance.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a4e219-ae95-58fe-8666-7b8fa0a42b3a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airspacehires.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspacehires.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--872be0bb-f57e-507a-9349-23fc3560bba3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airspacely.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspacely.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cef1b68-a515-5201-8713-80dd83125443","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airspacetracking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspacetracking.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beb74557-6189-545c-9a0b-31d81a0273c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airspacetravels.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspacetravels.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16309278-0379-5801-ab73-d99ae642a057","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airspacevault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspacevault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ac61251-0d78-5550-aab8-4ef67d92adb0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airspaceweb.blog","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspaceweb.blog']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ee8a6e7-89d1-558c-9ad6-7adf5036ffdc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airspaceweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspaceweb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82afe38f-f78f-56a7-9f25-5174d8098ea1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airspay.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspay.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cff61be2-5089-55db-a501-c95b81f7173e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airspecialties.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspecialties.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7cef56c-15fb-5bb4-b605-8ee8906712d2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airspecialtiesexpress.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspecialtiesexpress.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--652764a9-2765-5226-9c4e-c48098eb229c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airspeed-phil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspeed-phil.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1e5ab22-5a68-5eda-a0d3-f6c28d85ebe0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airspeeded.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspeeded.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cd8a310-7019-5c48-99ca-6d84a11b7f90","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airspengs.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspengs.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da0ccd74-faa9-594a-929b-382593d7f5ae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airspleiadgrid.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspleiadgrid.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4eb3e5-ac4a-59e9-9e65-4d902958ef90","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsplints.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsplints.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8cc06f2-1162-5c06-9fb7-5803221de6a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsportbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsportbet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aef4d9a6-1a66-5216-a5fc-3621e3d7d10c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsportshoeshopnow.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsportshoeshopnow.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1355d481-912f-539a-b64a-2725e514f5c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsportsneakershopnow.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsportsneakershopnow.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fef02d6-f7e3-50a2-ad6c-810292511384","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airspotki.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspotki.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e7b95eb-6174-5ce1-8edb-26d7dc0285c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airspringjet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspringjet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcd1fa5a-98b4-5519-8b6f-b885f62f697d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsprings-tr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsprings-tr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25c6a115-b6a4-5536-8426-8373de2c24b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsquaredcareers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsquaredcareers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--747bcc88-1df5-5b06-924e-0f7ae75e082f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airss.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airss.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89d7fb11-c311-5442-a4a6-6a5721a278d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsse.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsse.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e860e679-14ee-50df-999a-5fc4748c3d54","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airssial.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airssial.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b941f7ae-1a4e-55d5-9bb2-744eb0227bfd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstack.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstack.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b314ae-a87a-5514-ae40-e62ab51abbaa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstairfear.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstairfear.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e30571c-14cb-5424-bdfd-b5722a5e185b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstar-lights.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstar-lights.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c64dab7-d5db-5c53-8dbb-8d0378822b79","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstar.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstar.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--978c7f83-df02-53d4-9cc3-3b7ebf8f8bb6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstarhome.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstarhome.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3da164c-0346-56a4-b726-64da9ff4be1b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstay.host","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstay.host']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26f7c27c-854c-5b39-8c14-3bbf565bf0ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstaydeals.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstaydeals.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a6a7db-426e-59a7-9303-ed9850c85851","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsteading.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsteading.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49a1fd9b-8593-511f-8864-d3f5d54d6184","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstem.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstem.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b120eab5-999d-5f93-844c-39bcdf18de7d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstepmode.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstepmode.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c5d3185-b3a5-50ca-9150-c4554e8ae953","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airston.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airston.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--323e4931-907e-5db6-9631-141ddbe90444","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstonedq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstonedq.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b98679c-bcb7-5b42-90c4-bf8842a7f5c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstormbranchrobot.beer","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstormbranchrobot.beer']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efda1add-c9d6-562d-8bb6-1d7b7b16a6fb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstraglobal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstraglobal.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01b3a338-ec43-57be-a2b1-819ed730166a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstream.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstream.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea13afdc-2a28-54a6-920e-8fb7441b1fc0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstreambroadbandnet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstreambroadbandnet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8cf77af-a9f6-5725-99a2-4f1faa801b57","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstreamexpeditions.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstreamexpeditions.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c302951-396b-5612-a105-2e29a8f04f4e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstreamfy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstreamfy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d11768c-5242-5fbb-8987-7dcb6b7bbf4a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstreamfy.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstreamfy.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01bd81bf-1379-566d-9871-c85249d02d1e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstreaming.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstreaming.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4218fe50-801d-53b4-b26b-815543b6634d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstreamlife.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstreamlife.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac997e9a-5fe1-5555-ac09-f049371cffb2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstreamly.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstreamly.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28acb5fa-2eef-5a15-9ef3-c250ff9ed203","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstreamnoir.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstreamnoir.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36c52dda-ed66-5959-ac1b-924f8244c53f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstreamnx.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstreamnx.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b0537e7-2d4d-553d-bf89-03ee6582c06f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstreamza.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstreamza.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dff4725-7fca-5334-8a44-56a8f5296a7c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstreem.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstreem.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3660bbe-ad20-5d20-ab22-e1f11a42be25","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstrips.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstrips.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e36286a-f76f-5b89-a731-f202329532ec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstudiovo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstudiovo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2967d205-a1c7-546a-ab24-0690d4b3d944","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airstyle.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airstyle.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--321ee1a3-0d3b-5853-86d3-2954426c2a0a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsummer.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsummer.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fc39f2f-cf33-5d5e-b1ca-b57b4c6abdcc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsummers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsummers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52f67ce9-f92c-5b0f-a5cf-75ec6495d01c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsunoral.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsunoral.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebfb0292-3d1d-5212-bf98-71b76d4e9e5f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsuperfastshop.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsuperfastshop.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1005be94-2a4a-5ed4-87a8-136d8fd4ebe8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsuperintelligence.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsuperintelligence.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b5eff1d-47fb-5c1a-a79e-90116c03b4e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsuperstore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsuperstore.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--719badc5-cf93-5731-9f3e-af70056c8ae5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsupplylogis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsupplylogis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1028115-105a-5478-8de2-f8edf27c4923","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsweepinc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsweepinc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eda89ad3-32de-537e-81f3-8eef4f8b4184","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airswiftcourier.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airswiftcourier.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50b5b222-3caa-5236-9951-41daa941fabf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airswiftdelivery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airswiftdelivery.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f61e9ebd-ce88-5334-9da4-c897b152f852","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airswiftinternationalcourier.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airswiftinternationalcourier.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8a8117e-23a8-5cef-a831-3522ba2dfdbd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airswiftlogistics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airswiftlogistics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5da45c2d-1819-5a68-af1b-7ea46314b647","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airswimmers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airswimmers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b39f94f-c9b4-57b1-8a9c-e1a3b4459b0f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airswimwear.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airswimwear.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47b0b533-069d-5578-83f3-12e7a0bb6a90","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airswing.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airswing.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8001d71-1d2c-578a-b197-d2b528c65b11","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airswisscollege.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airswisscollege.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3c9f9bc-9c09-5ec1-a61a-2e185114eff7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsyai.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsyai.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e0cf49b-675f-5603-8536-72b48830aaef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsynj.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsynj.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cf8a42f-a36b-5193-a585-10e849f9675e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsystemsofiowa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsystemsofiowa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c28faa7-5b84-53df-83f0-c8b7bef9c29a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsystemsofiowa.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsystemsofiowa.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99ab5662-e4ea-574d-9e74-689d6a439414","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airsystemunlimited.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsystemunlimited.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58395fb1-c570-5139-9e68-272a0134835a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airtoskyanabipe.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airtoskyanabipe.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55881b05-c10e-5217-b03c-6fbf0f6ad2f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airtricitywindfarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airtricitywindfarm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75de1acc-69a2-5990-825a-d0d7f9669f1d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airtriplebay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airtriplebay.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a494aaa4-dc4b-5569-8d24-4a18e4054f6f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airtronic-in.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airtronic-in.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--011cd3bc-7843-5e2f-a7fb-baec85a4ee44","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airtronicgauges.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airtronicgauges.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--338c48b0-30dd-5534-9531-54cc889555d3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airtronics.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airtronics.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cd856cf-b70b-59e3-8d50-afe9d41708da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airupsouthafrica.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airupsouthafrica.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--303c16b6-b7c2-51e9-8f1e-8a96adc05a93","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airupsuomi.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airupsuomi.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e6d662b-792f-5ddc-a08c-2160bd3ecfdc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airvisabd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airvisabd.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--260a05de-c25a-58f4-9602-12ecd0fbf6df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airwalleten.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airwalleten.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d5b741a-96fa-586b-98aa-3a52f9c29990","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airwalletglobal.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airwalletglobal.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83a97fba-49b6-596f-9b35-25d09cfd6796","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: airwise.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airwise.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c6a4d01-c739-5021-9bf3-61b0e34da3ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisafetrustit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisafetrustit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--420b2406-f95f-5675-af12-c9705be1d953","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisatrustit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisatrustit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--076aae9b-e371-5b1a-8f84-e017770eb706","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisecureframework.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisecureframework.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4c43950-9efe-56a8-a497-32c41f017e76","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisecurepath.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisecurepath.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65beda73-dd48-539f-8617-324c1a33c3e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisecureprocessing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisecureprocessing.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b4df345-5c6e-550b-81f2-1a7a993c6db9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisecurespace.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisecurespace.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a77fd7ea-ff0b-5a65-8ddd-2c4a366082bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisecuresystem.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisecuresystem.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e51f92d-1244-5b1c-b9ce-2cf764a2c34a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisecuresystems.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisecuresystems.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--def3d8c1-3d79-51c3-bf5b-e884ad9a2c97","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisecuritytrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisecuritytrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88f3373c-af2c-5e4b-9bab-33559f9da292","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisecuritytrust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisecuritytrust.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7625b63-ae9b-5eca-a26a-c6334625a91e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisemanticnexus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisemanticnexus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--507591fb-089e-5d0c-bd24-a2b48f7563d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisensedock.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisensedock.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22908f14-b5a9-579e-8fb7-2a8292c7d01c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisentientgrid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisentientgrid.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18cc5ea4-ea36-5a86-85b9-31b570f755cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aishowerwise.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aishowerwise.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a78e446-41b3-5776-aa85-42b7d9f50bcb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aishumattress.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aishumattress.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e076c7a7-87eb-598a-a09b-71792f602dd7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisicloud.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisicloud.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a3c43f4-03d1-5fdc-b3f1-3073c13ff270","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisignalbridge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisignalbridge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--975ff2e9-958b-5632-8c9c-c6e00ca42773","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisignalengine.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisignalengine.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89e0b2da-ad2b-5c28-9d34-9467b77acc82","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiskbattery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiskbattery.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e82c02d2-4b59-58cc-9390-ae68bfa1db65","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aislewallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aislewallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f471d38-6610-5b07-8a28-9d4eb522ca90","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aismartccore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aismartccore.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a07602f7-8d03-5850-b51e-85654b67a380","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aismartchassis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aismartchassis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb1b5986-852f-58b8-9910-c364949f6871","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aismartcortex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aismartcortex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e57af93-5329-5da8-a2eb-e0873ba1f4e1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aismartdirectionflow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aismartdirectionflow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6089e00f-2aff-5d70-ae93-d57c91201aac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aismartfabric.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aismartfabric.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cf201ab-027c-59b6-a736-e9ce76ded593","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aismartmark.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aismartmark.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cbed970-3bf2-5649-9df1-cba289752c44","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aismartmindsystem.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aismartmindsystem.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa7551bd-4544-5e29-86fa-c5ff86afb3a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aismartplatforms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aismartplatforms.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6636ca98-42f0-5d5f-b727-cc545a372228","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aismartpod.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aismartpod.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d578acf9-ba19-5dea-8d17-da6dab694084","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisolana.art","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisolana.art']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e1fcb5-5882-525f-9799-02724827e72c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisolana.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisolana.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c62de1b-c2ca-52af-8f1a-fc073a5537f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisolutioncore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisolutioncore.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e69fc2b6-9ca5-5018-8bc4-60f4bea12a70","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisolvenet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisolvenet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e856d923-b045-532f-a680-f59df24befe2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aispeechbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aispeechbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dbb45ba-ab35-5ab5-9c17-6a291d034dfa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aispeechroute.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aispeechroute.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd6fef94-8e2a-54b3-8208-77e0a1c57bb2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aissa.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aissa.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52241335-6f87-5925-a486-a7a80b5381ad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aissac.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aissac.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d958cdea-7f69-5f18-96f7-586372b282e2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aissamtaouili.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aissamtaouili.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--785a3fee-e456-50ba-b2ed-de43f0c746e1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aissatravelhospitality.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aissatravelhospitality.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9fd0173-4059-5786-b50b-ba583da87e57","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aistrattrade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aistrattrade.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04bdb0d6-76ad-5fb8-a8f9-5d982eef2f58","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aistrattrade.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aistrattrade.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a39b6e-0d6a-5644-a553-3e6158fa80fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisuided.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisuided.biz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cebad8b7-06a6-52f4-9c52-327f209cadb4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisuifenhe.skin","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisuifenhe.skin']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15cc7295-fb61-5a69-86bb-092136e7b2ff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisuihanki.tech","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisuihanki.tech']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aff077c-17c2-5805-9ef5-273746d07735","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisuitfin.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisuitfin.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0981010-0394-54e5-9042-d80329e75d1d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisupportmarketing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisupportmarketing.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b04026e-f593-5eb8-85ef-1aa39e454f01","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisupportvectormachines.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisupportvectormachines.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6fbc37f-1cce-5e40-8631-36cfc72711b7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisvectorflowen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisvectorflowen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c8a729-98a7-5de1-abcf-5b9efa449f46","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisynapseboost.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisynapseboost.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ffcd0a3-66e0-54ec-83d4-84e7d5d51e65","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisynapseecho.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisynapseecho.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b651c657-3b21-5072-8c4e-41e0c44e0e80","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisynapseedge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisynapseedge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ed80f10-1c3d-5642-8870-5214ea8efc2e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisynapselab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisynapselab.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ea95309-1ad8-5b72-b5a2-ff1ce107ba5c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisynapsematrix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisynapsematrix.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c948887-8cf7-5541-9e27-0a034bf14004","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisynapsenet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisynapsenet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b27be96-fdc8-5a91-a9c4-4b0b58b9b266","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisynapticforge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisynapticforge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00f57fd7-70d6-5034-a68c-dde413caa199","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisynthesisno.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisynthesisno.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dca6f57f-d0f3-52fa-bc0f-838d5b629eb5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisynthesisnodes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisynthesisnodes.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34e13913-9446-582d-966b-73f91e1cb93e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aisystemsecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisystemsecure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--865b36e0-8121-5415-9a3f-6962ce4f9b21","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiszzyelectronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiszzyelectronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08db8419-b67f-509b-a94f-877cf4fe0bd4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitattoo-generate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitattoo-generate.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b6fbcac-24c3-5eed-874f-cbb9aa9b57b7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitattoogenerator.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitattoogenerator.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa16f22c-7b77-5011-ab35-f839abcbdadc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitattoogenerators.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitattoogenerators.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a2c0e82-8baa-5bd8-9b90-1fd7c120a0c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitattooideas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitattooideas.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd1b7fd4-3ab1-5977-b513-78b5dc463493","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitcoirs.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitcoirs.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63553965-2ec1-559d-bd76-823f6f137a07","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitechnologytrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitechnologytrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--907659a3-9b5f-594d-9b88-ac9c97fd47c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitechnologytrust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitechnologytrust.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cffa92a0-1525-5633-8c5f-4722fc6a3fd1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitechtrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitechtrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4c478a8-08a9-55d2-9bf9-7f24ef7a2e89","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitechtrust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitechtrust.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca9fb854-d903-5b1a-9175-e6f97638e399","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitechupdate.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitechupdate.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--758873bf-404d-5a17-8082-473c04798d2b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitechyard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitechyard.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--158baa90-9b24-5a39-b271-64d08e09bbe3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitelegrama.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitelegrama.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf3917b1-fb45-5171-9727-6010a9aa4f7c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitensorcore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitensorcore.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0427f69f-f88a-5816-ac0c-dcb839764597","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitensorgrid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitensorgrid.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59158161-fe1b-5373-b616-805a799a0f6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitestcore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitestcore.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebe37909-7e5b-5362-a166-220ba05c29d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitextbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitextbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f208fe34-da29-5834-9abe-24f8c1e574ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitextformatting.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitextformatting.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--416a3baa-b10a-58de-9357-684555e676a3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitextscale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitextscale.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc5c1f84-c9f4-5e74-8701-12641e18250f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitexttoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitexttoken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f1d09fc-807e-5cc6-bd62-b8c188fb0025","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitforex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitforex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a26687-846d-5355-9d9b-4e0c1c263ebd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitgdhl.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitgdhl.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73979543-fff3-54dc-ab22-bac7be2dec7c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aithirsttrap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aithirsttrap.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ad5aebb-6694-5fa7-b66b-0de7c957deda","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiticketsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiticketsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f863a796-5ec8-5d25-becb-7a766420dd1e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitoken.cam","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitoken.cam']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1815d85e-7e2e-5285-8a22-78594ec7ebb1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitoken.forum","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitoken.forum']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--452d86e8-6242-571a-9161-f3d81394c593","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitoken.ooo","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitoken.ooo']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e23d0007-cc4e-5e25-ab70-731b4a5b8c68","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitoken.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitoken.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3e9699e-edb5-5eb7-8bdc-4974a435b754","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitoken.space","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitoken.space']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a5f80c3-32d3-5478-8ca4-c6f84cb73d0d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitoken.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitoken.wiki']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db299988-f59a-50a5-8c69-337c3e488a26","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitoken666.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitoken666.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39bce1cd-a141-578a-8337-47b6c43c958f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitokenbyte.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitokenbyte.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4121ffc-f345-53e4-8615-3825109d563d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitokencs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitokencs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--611eaea8-1015-54be-a4b4-a8571710147c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitokenhub.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitokenhub.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9200b9f-59c0-53d8-b67b-24d46f1c17c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitokenkey.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitokenkey.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a1fe8b-2bfa-5c3f-8783-828352dbc410","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitokens.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitokens.one']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d854def-01b4-5c71-9386-fc511b9316e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitokensr.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitokensr.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c5d9c84-b87a-55cb-b798-86a341c8b620","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitokentrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitokentrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef73ea63-a4cf-5950-96b6-567ad330556f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitoolchase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitoolchase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d581420-5401-5e55-9acc-625ca2e80014","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitoolconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitoolconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9631bc48-51c5-5e40-8745-8168cfe69e0c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitradingbots.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitradingbots.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfeeefbc-0610-5bf2-91c1-921f97a777ff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitronewallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitronewallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fb74085-a756-556e-812b-f03c9ee43312","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitronicrobotics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitronicrobotics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cb3d337-ca19-5601-9bc1-ff4dafa3094b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitrustbitpro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitrustbitpro.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47cdeb72-ba97-5c88-b78e-a3915cf92d14","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitrustfin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitrustfin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--109e2617-3125-5e1c-8fbe-084587c9baad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitrustgates.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitrustgates.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b51e316-47a3-5dfc-a294-3558d4d9b821","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitrustless.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitrustless.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--233ee3bc-763f-5bd1-a082-9d51586cf9e9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aitrusty.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitrusty.biz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f3b0a16-e1f0-5b7e-bfb8-cf5f6c44c247","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiupdate.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiupdate.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b77d97-7693-579e-a888-28d213cbf243","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiusdcbnbweb3.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiusdcbnbweb3.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72f4e7cd-1de2-5d38-b296-35aaac92c05d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiusdcweb3.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiusdcweb3.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2410c6a8-b88f-5c75-8be8-887d80db3c0a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aivault3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aivault3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1175502-eb3d-5859-ae87-4c6a4b8ca652","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aivectorbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aivectorbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e07d09ef-215f-5354-ab67-8d872110bea7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aivectorflow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aivectorflow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb8958b9-7c6f-5490-b0e0-7e94aa626996","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiverify.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiverify.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f0e69f-b342-5db1-b28b-b3977cb81a1b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiverify.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiverify.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12eaa1c1-0f17-55ca-a19f-13bb6c190143","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiverifynow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiverifynow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e2edfd2-aa4f-5ba1-85bc-1f2ff192bb1d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiverifystocks.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiverifystocks.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c64bb9e-9b9b-547c-9adc-cd52d1c44213","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiviorgastronomia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiviorgastronomia.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15b0f778-8869-58b3-88e7-7e6b6e70b822","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aivisionbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aivisionbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2d1d69f-3af1-5d07-98df-b51491598936","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aivisionhost.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aivisionhost.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39bb8f1f-7d08-59e8-8dc3-022dbbde6284","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aivisionpoint.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aivisionpoint.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a9fa4c1-0a44-5757-b203-feeae7fdee2f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aivisionvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aivisionvault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e855349-1969-5579-8d34-6bdb6cf732f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aivoicehash.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aivoicehash.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf02e2fc-3e8d-5786-a6e3-ad982350589b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aivoicesuite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aivoicesuite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76d027fc-358e-5e2e-bb6e-2972046c5dc9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiwallet.global","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiwallet.global']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c84bc6f-17a8-5dbf-be37-58f0c410f957","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiwallet.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiwallet.network']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a1bd0e6-66ba-5112-b629-411d567d49d3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiwalletpay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiwalletpay.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1257456f-0c9d-53f7-948e-c6fd6d708a3e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiwalletsecurity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiwalletsecurity.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74a06481-faf2-564c-9027-64c9eb43cf0a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiwealthsuite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiwealthsuite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c726cca2-9aab-58df-8a03-898a9b4a76b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiweb3.global","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiweb3.global']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aecab358-31aa-563c-9c2a-80ed200584b4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiweb3.tools","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiweb3.tools']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4506cd2-7957-53ca-abf8-368ac99ee464","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiweb3.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiweb3.top']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb34fe0c-af1e-54fa-91d4-c316da6260e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiweb3app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiweb3app.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce684cfc-8298-58bd-8a76-e23532e98fc1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiweb3bnb.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiweb3bnb.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c4ec0d7-a4e8-57bc-b57e-ab8c6c446899","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiweb3g.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiweb3g.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79fa6ca8-6b93-5786-b8f5-7fe723120824","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiweb3usdc.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiweb3usdc.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b9ef318-b8ab-5231-b41c-cb1612a33e84","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiweb3usdcai.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiweb3usdcai.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bab2bc94-d10f-5b5f-a542-0741aead9cea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiweb3usdcbnb.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiweb3usdcbnb.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9591d266-d07d-5608-b06a-55d3cc2d0a70","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiwhatsapps.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiwhatsapps.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe31245c-5aff-54ca-9f20-8dffc618602a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiwin-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiwin-google.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16d3bdce-6d97-5fe1-9946-d9753d56270d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiwise.best","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiwise.best']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9154687-29ed-5135-905e-f4b23aa5cd53","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiwise.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiwise.biz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33ed40ec-0dec-5da3-94cb-e34f04075366","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiwise.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiwise.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bec467c-946a-517a-82da-1164223d4c68","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiwisedevices.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiwisedevices.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f6f6816-88f4-5cc5-8753-05df6281a7bb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiwisehub.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiwisehub.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61c71d57-66f4-5cd5-80fc-b89b3ee131e9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiwiseinvest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiwiseinvest.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e96a23a2-89e2-55e3-8165-1faeb40a504f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiwiselearn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiwiselearn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--993fb9d8-6f9b-5048-b86a-6c0a5e2e3034","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiwisely.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiwisely.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba73ee7d-0738-5a0e-ab3b-865cd95d15d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiwiseplatformup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiwiseplatformup.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45987969-cacc-5fcb-ae91-c61a5ee377bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiwisequest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiwisequest.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cd3fe44-261d-581d-b968-a3549d9f5484","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiwiser.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiwiser.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f1512bc-7dd4-52e0-8d88-e339ee530f7b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiworcademy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiworcademy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fa58140-91b9-56c3-9087-e40d42038818","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiworldtrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiworldtrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc88dfb9-6dc8-5ac8-ad17-66380aa86825","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiworldtrust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiworldtrust.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f5722f4-8b74-56d2-a725-d54c82bdbe39","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiworldupdates.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiworldupdates.digital']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed3a11a3-9a1c-5f9a-a097-cbc7678467da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiworldwidecryptomonitors.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiworldwidecryptomonitors.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93e4f96d-8604-5937-a979-682154d33fc6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aixbridgetosuccess.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aixbridgetosuccess.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dfb0ff1-55f2-5880-b76e-ffa01d9fd91c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aixbt-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aixbt-connect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90299e33-741d-5bd8-a453-9bfe7e25c4df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aixcb-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aixcb-connect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec83b5d-dd8c-58cc-9f46-4e5aa4dabd8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aixuanzg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aixuanzg.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--567b33de-0539-52ef-8b1c-be5d9d3c6dc4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiyananfarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiyananfarm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5560e67b-4f2c-5dce-8520-56a17a0efcc9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiyoutubetomp3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiyoutubetomp3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4021f5a-06fc-5bfe-bacb-24e98054d1ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aizoralo.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aizoralo.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c9e9cab-13e7-5c7f-9d2d-3afd859f0d69","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aizoranow.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aizoranow.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3799eea3-4922-5667-b7b0-9833cb9adb51","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aiztoken.tech","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiztoken.tech']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74f316f1-152e-59b8-a520-94886fa09e01","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aj0e8upszq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aj0e8upszq.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2642084b-3dbf-5116-91d6-536066c9b0dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajapplegate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajapplegate.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94be9cb9-6eaa-5d12-87a5-a7e0bd612a6a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajcommercialgroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajcommercialgroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d58e9a0-78ff-5159-92a5-04c96dbba9e1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajdhl.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajdhl.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1050a0a3-8657-5cef-a8d4-6a4d2df7936c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajebaseballleague.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajebaseballleague.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d506fce8-45cd-5940-9bf5-8f63c006960b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajedrezargentina.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajedrezargentina.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a91fbf8-1416-5218-a5f8-889db01d7b1c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajewoleconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajewoleconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ece9c2f-c30b-55e0-bdd6-7453ab033665","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajformanabogades.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajformanabogades.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de0d0c1d-d42b-5c4c-80d1-0534c286709a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajgmailbox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajgmailbox.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--256392ae-4cc0-5b8c-a63e-33748e980714","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajh5.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajh5.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408a248e-fba6-5928-baa2-bcbac1b59f77","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajinelectron.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajinelectron.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71e99888-27b9-55b5-8f7f-fbc4689bc653","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajintrust-fg.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajintrust-fg.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90890c82-030d-5043-b7c7-12fb427a798e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajitoon.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajitoon.cc']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d45eecfc-d643-5f05-b335-e2188a0ea7ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajitoto.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajitoto.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4a42479-f9b6-55ed-8cdb-230fe9ab2c5d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajkeibdhnfssas.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajkeibdhnfssas.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d34993a-156c-578e-98d2-4b5e5c2de924","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajkerchattogram.news","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajkerchattogram.news']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6ac5707-40f9-5d88-ba0e-1abeac271ceb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajkshinwarielectronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajkshinwarielectronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--082b302b-79c8-52f9-b2af-4f8d23e99020","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajlan3bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajlan3bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d700e674-7a8d-5099-9d75-dabf83178295","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajmad678ali21.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajmad678ali21.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--802750cc-70cd-5a4e-9773-ebcfb06f4595","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajmairsharif.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajmairsharif.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80542c99-044b-5b9d-a9de-9b8a9621228d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajmattila-artstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajmattila-artstudio.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a398642-1915-5c18-bc4f-08b3b9863cc4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajnabia.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajnabia.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfb12553-2f24-5d65-8fa7-93acaf3eba40","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajohrbcbu.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajohrbcbu.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abc0f9ee-36f9-582e-936e-abed2a9f18b4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajscdn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajscdn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b26c200-5197-5767-900c-0bf27042821e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajuda-necessaria.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajuda-necessaria.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0e9c79d-f326-5088-a81b-3a3bd641d069","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajuda-necessaria.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajuda-necessaria.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ea06874-334b-585e-b4b0-2f7867913480","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ajudanabusca.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajudanabusca.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dd85907-1057-5803-89c0-0a305e501bcb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ak-tronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ak-tronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8df6269f-216d-5896-a277-e829e25a5b70","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aka-microsoftlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aka-microsoftlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e216e3c2-ea3c-5993-bbae-abf2d62e2f7e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aka-microsoftonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aka-microsoftonline.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eada2708-04ed-5071-be3b-7418d58aa649","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aka1-microsoftlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aka1-microsoftlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb97c1ee-ba62-5391-a8e1-f4a2e743e8f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akabase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akabase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe5a5d7d-84a5-57c2-90bc-548050424653","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akacatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akacatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c6d6098-cc28-5334-aa37-0c34587aac2c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akademiupsi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akademiupsi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7276151c-f7e5-5723-96a0-23c1d881d373","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akaisuisei.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akaisuisei.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1071a02-0a86-5a54-ae6c-007172e107f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akamaigroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akamaigroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--194fac8f-3cbd-51ca-acc5-8a60a2404a68","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akamsremoteconnect.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akamsremoteconnect.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b30a3a31-cd95-5e03-abc3-4710a5cd5be5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akatokenrewards.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akatokenrewards.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f05d939c-bdf8-521b-9272-2c072b5b4d9a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akattacentralunion.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akattacentralunion.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a63e45db-2a68-570a-992d-b257412d53e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akbasemre95zula.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akbasemre95zula.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee8bcbee-bd0e-56da-802d-080a43b6a911","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akberally.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akberally.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--651aeab7-4d9a-550e-b809-0684acbd3b34","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akcceal.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akcceal.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44bb1a56-2415-5f89-9031-2c7a54a747f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akconnecttv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akconnecttv.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e18eec4-1457-5b47-93d2-22bebced8991","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akdbr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akdbr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c46b7b40-49b5-5b74-a42e-f5e7dea03b83","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akdumansbonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akdumansbonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93785260-a868-5ade-8697-ca9e31cd6caf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akesupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akesupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48d3689f-85ef-5534-806b-06f7d063a591","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akibhossain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akibhossain.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84475ac0-0838-5278-86a9-f48590289873","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akif41bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akif41bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93811bf8-8755-5a3a-97fc-d595bb485979","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akigroupsac.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akigroupsac.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eb86342-d488-5f38-822b-e8e637d9cdac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akihitosuite.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akihitosuite.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cb44b78-0a48-58bd-a10b-20e83eb59a22","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akin0421bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akin0421bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42677702-6100-5976-963e-5dd2299cf290","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akin238721gmailson.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akin238721gmailson.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b13b188-d41d-5cf9-bdfd-3781d010aca7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akin34bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akin34bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5003d500-1cd2-5021-b5f3-f6c9a41c6fa6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akin7272abonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akin7272abonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf7fe509-8e6e-54b5-a4aa-9e3c27ea4a19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akingsatta.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akingsatta.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e82493dc-2975-5003-aad7-4d7a04f97181","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akintrust-ag.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akintrust-ag.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--923367ec-2ab1-5972-88c6-c19ed1bf5052","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akirasecuresfiles.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akirasecuresfiles.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20c533a1-c018-5881-9149-841b86a2b9e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akitatoken.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akitatoken.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6c4d68b-d007-54fd-bdf8-617546e1c271","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akkademytattoos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akkademytattoos.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--120af89a-1f20-5a13-9fad-2767cb5a2412","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akkus80bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akkus80bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3184831-ac71-58f4-904f-f79858fcfbcd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aklandndcattle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aklandndcattle.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77debf83-c37a-517c-8c47-81f09a12e244","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aknbhdr1311gmailasus.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aknbhdr1311gmailasus.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6ee0ec-6a7e-5535-9bc9-f0b194878823","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akohubaishopifyapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akohubaishopifyapp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8629bc0-be64-588f-b48c-6b8b9179b51b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akohubshopifyapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akohubshopifyapp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86b2210c-7308-5780-9733-517d096516d2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akrdairyfarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akrdairyfarm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d248e79d-42d2-59c9-afa1-9a41cbac119a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akritimattu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akritimattu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1204302-666f-57c9-adf0-43600dabde11","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akronattorney.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akronattorney.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0fb8152-0233-5b59-8eaa-afe5577b7d84","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akroninchina.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akroninchina.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2272e91-d470-5c39-aad7-5543ba747a51","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akropatbonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akropatbonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54def977-ef7f-54e8-b487-e8ea079c7488","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akropattam.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akropattam.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6645938-2810-547d-8ef5-f789d402a9ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aksesdanabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aksesdanabet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a2ef6a-c040-5827-ad09-ab711ea10332","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aksfdjhqrbcqwrlkugv.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aksfdjhqrbcqwrlkugv.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--542fec29-ecba-55f8-a2fa-fa25d4804eeb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aksulubonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aksulubonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc89d19d-c9ae-5c8c-8b8b-f50ba3195402","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aktas2525bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktas2525bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf823f54-a248-5841-932e-687d8e7322e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aktasbonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktasbonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd65248e-ffe0-5c65-9762-82d5c282714e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akterrefrigeratorandelectronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akterrefrigeratorandelectronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45877586-5e86-5357-aae5-54f232259529","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aktivanzivot.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktivanzivot.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6539de18-c70f-58bc-bc9b-afa5713ec037","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aktive-kag0ya-gmo-secur-active-secure-kag0ya.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktive-kag0ya-gmo-secur-active-secure-kag0ya.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de83ecd2-058f-59ef-953c-fbf62043f0f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aktualisieren-deutschebank.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktualisieren-deutschebank.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee5215bd-7e35-55a6-9db5-8b6aa20f4625","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aktualisierung-paypal.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktualisierung-paypal.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aadf0fce-985f-5360-bc94-40bfd6e3b002","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aktualisierungen-sparkasse.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktualisierungen-sparkasse.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3c59aac-8700-5de7-b828-aa657a9069af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aktualisierungs-prozess-paypal.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktualisierungs-prozess-paypal.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00147928-dc39-57db-9299-54b118ca85ae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aktualisierungs-prozess-sparkasse.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktualisierungs-prozess-sparkasse.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8b212f7-c91e-58b3-94d2-2aecc5b79404","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aktualisierungs-prozesse-sparkasse-2024.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktualisierungs-prozesse-sparkasse-2024.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32abaa37-67db-5c8c-8897-956358ab4a4a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aktualisierungs-support.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktualisierungs-support.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c28123e-560f-590f-89df-1b603d8384c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aktualisierungsparkasse.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktualisierungsparkasse.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f22e45a-1bb4-5392-a56f-b932fae08758","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aktuell-sparkasse-de.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktuell-sparkasse-de.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae855a66-5cea-50d6-8df9-c654958fe62c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aktuell-sparkassen-tan.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktuell-sparkassen-tan.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2210bf2b-3e9b-538a-829a-76786be47791","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aktzepatanz.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktzepatanz.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0fc6070-ac44-51a0-90d6-1daf87e90ac4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akupunkturanovisad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akupunkturanovisad.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a87d7545-62c3-5e89-b96a-27964a979852","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akurattoto.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akurattoto.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--780779d7-ec27-50db-9218-97a48b2c6a19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akurattotoslot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akurattotoslot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ba3913a-fecb-5a25-a462-abb58599524b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akurmint.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akurmint.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cca101f-7033-5ecf-b16e-37be1bc3db7b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akusm40gmailvip.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akusm40gmailvip.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f9a54ee-2a0f-5d74-aaec-45d7bb2d5c94","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: akwa.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akwa.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4a812c4-a76c-5f65-91d7-c43f5f376999","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: al-falahelectronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'al-falahelectronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86858f87-2330-50b9-8605-f36e7429bc60","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: al-hussan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'al-hussan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93572d2d-d5f8-5d0e-ab97-25b274ec2c91","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: al-support.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'al-support.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6327158-468e-5427-bb20-6296fbe6329e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaappconnect-1f.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaappconnect-1f.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3b16c5b-ed13-55f6-b7b0-fe402439eb1e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaappconnect-2f.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaappconnect-2f.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf960d76-c364-5f88-8068-69b3adf771b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaappconnect-3f.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaappconnect-3f.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d53fcc4-dc70-5c58-8515-383b2f7fad7b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaappconnect-4f.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaappconnect-4f.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01b5fbce-8ad1-5455-aba7-902171bc535a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaappconnect-5f.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaappconnect-5f.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d26c51e-4f89-55fc-866c-c36bee6752aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaappconnect-6f.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaappconnect-6f.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8cb0069-ffb6-52f4-8432-e1f71d899167","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaappconnect-7f.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaappconnect-7f.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a59d753-68b8-54d0-88fa-7b6f686b652b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaappconnect-8f.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaappconnect-8f.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7da284d-ae2b-5bac-a56c-375ff640f3f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaappconnect-9f.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaappconnect-9f.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--608cf528-8abb-503c-9bce-2cb4ddcd6892","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaattin7441milli.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaattin7441milli.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f58c6e6c-1131-5686-a1b5-6e5c6301a226","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaattin79tam.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaattin79tam.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78957ebc-26bc-5686-802b-de6fc7cc7a57","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaattinilyassaral.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaattinilyassaral.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edd7ab9c-e04c-5150-875e-ceb177cbde2a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alabama-connections-academy.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alabama-connections-academy.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe2e795b-c0d5-5674-b1e3-df4819002b50","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alabama-connections-academy.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alabama-connections-academy.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53935f99-0d82-5bd2-9f8d-642700437b41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alabama-medicaid.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alabama-medicaid.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce36e1d-79ac-5e01-9f89-bb3c62d093f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alabama-medicaid.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alabama-medicaid.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5604b9fa-964a-5806-9638-8a8f0c7910e2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alabamataxattorney.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alabamataxattorney.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d1befc-d414-5064-bcc1-cec932aaa82d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaconnectapp-1a.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaconnectapp-1a.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfcb0164-6edf-56aa-83a6-058493c8cebb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaconnectapp-2a.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaconnectapp-2a.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6775ab12-ef4f-5893-aad1-d102cfc54e46","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaconnectapp-3a.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaconnectapp-3a.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f7802bf-0b16-5260-9594-51fc4081c93f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaconnectapp-4a.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaconnectapp-4a.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--581b5225-8cbd-5b84-9357-6e456c548044","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaconnectapp-5a.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaconnectapp-5a.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0846b9ff-973b-53de-b6e2-35b1b18b49f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaconnectapp-6a.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaconnectapp-6a.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4e9784c-a632-5829-afb5-26ab0816c067","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaconnectapp-7a.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaconnectapp-7a.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa6bb5ab-2cd6-5ace-be86-7c4e16f4778b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaconnectapp-8a.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaconnectapp-8a.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cedc88c7-1dc7-5966-9fab-1deb2d548a84","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaconnectapp-9a.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaconnectapp-9a.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fbf1f98-fc56-5944-a1ac-e29df5fe963d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alalamelectron.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alalamelectron.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4c4817b-8415-5723-abbf-a64d482c2118","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alamanattravels.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alamanattravels.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d25afc65-ef95-5d38-9d3c-c54520792c75","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alamancefarmer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alamancefarmer.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c47143f-c585-58b1-b5e8-080dff7fe444","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alamintelecombd.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alamintelecombd.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62607768-2b41-5857-8040-b6890ce18450","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alamintraders.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alamintraders.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eb3623a-94a9-5c3a-9538-16ac4f5190e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alamistrong.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alamistrong.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b392fba-6f58-53f0-9820-994e01eee81a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alamistrongaf.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alamistrongaf.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb12531a-edaf-546c-8e4e-4a5b782ebec1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alamistrongag.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alamistrongag.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3379dcf8-3284-52b3-bcb6-6bbf49c2660a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alamistrongds.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alamistrongds.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a8ca08-b3f2-5b9d-af12-5fc51ef57081","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alamledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alamledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--640beb1d-ee72-5eaa-9706-c7a88eb91fd6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alamoanabnb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alamoanabnb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7061e0a-3f03-5c27-a6c9-f09d6c3b3961","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alamoautoglasssa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alamoautoglasssa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9d465c-e01e-5c8b-9dcb-ddf807398405","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alan-jackson-attorney.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alan-jackson-attorney.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c96e566f-cb1c-5c9a-aa41-9068024c0235","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alan-jackson-attorney.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alan-jackson-attorney.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83ba81a8-ed86-5560-8cb4-57df59da3e86","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alan-jackson-attorney.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alan-jackson-attorney.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cec18980-04e5-5815-ad5f-0c9a7ab57985","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alanabeauty.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alanabeauty.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8fa210a-42c0-5254-a844-50921c6ac936","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alanabellemour.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alanabellemour.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14ef7678-2b7b-5bad-b6ee-c82765e60f24","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alanabeyond.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alanabeyond.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4401160a-2872-5d8b-8fae-4acf66460f66","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alanetsui.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alanetsui.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4d90a0a-af6c-5759-a93a-23c2fb919276","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alanfarms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alanfarms.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a73ee00-6686-5d4b-881a-2c42e43feeb9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaninussale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaninussale.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b071b77-b646-51f6-ab50-e0ce37d6ed76","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alanmatt.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alanmatt.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e73a1c38-bf28-58f2-9cd5-2bc6c433eb2e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alantciti.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alantciti.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7dfacb6-a3d6-5638-bb82-539044b6fdcb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alanzayar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alanzayar.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb2f6ccd-b7fc-528b-b84f-3cc3ee052a64","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alanzhao.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alanzhao.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89a615f0-e6a0-55f4-9c37-eb4e7d685e2d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alanzhao.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alanzhao.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc723d54-8d89-5265-b893-dda9bc27b5aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alanzhao.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alanzhao.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1143b4a-aaf3-5976-abdd-99b70c3b5862","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alanzia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alanzia.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a17758d-f5d7-53e5-98d4-274b260cbceb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alanzish.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alanzish.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33e59669-14ac-5e79-b0b7-08b8dfce452c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alanzo.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alanzo.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4df9ee7c-6db5-5651-a71b-aec943ef1a1d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaoainfarms.mobi","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaoainfarms.mobi']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c463a2cd-7e68-5a15-aacc-80e1908aa217","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alarmelektronikbg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alarmelektronikbg.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4f99ed8-78ac-5b25-be2b-8d2be093018a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alarmsysteemgroningen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alarmsysteemgroningen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9debcefb-65d5-50b7-9561-230baaa836bc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alarmvault.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alarmvault.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26a90f2a-d47a-54b1-94a6-b6697bbdc3e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alascelletronico.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alascelletronico.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44c3e085-2e16-571e-94af-77b32c071f55","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaskatanzania.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaskatanzania.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb5bff97-e389-57ef-8a5f-8cf9e5e3b2a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alaskatidechasers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaskatidechasers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe4b5cde-ec59-5d6b-b5c1-6f42828b26ba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alastairsavile.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alastairsavile.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c298285d-bd3a-50cf-baa1-a6c782d408ea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alastairsim.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alastairsim.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73eb43ea-ffbf-58b1-bb32-b9ad456f454e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alasvow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alasvow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8a186f1-9d11-5665-aaac-2f63b3957c0b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alatet.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alatet.top']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff2c8db1-6905-5a35-bd45-ee7d20474575","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alatpanjattebing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alatpanjattebing.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a35b4d-1ba4-592e-bee0-3e99f914d76f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alattaar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alattaar.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a46920ac-5624-5673-8650-6490713a85a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alattarperfume.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alattarperfume.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05f4c28d-e363-55a7-b844-09960a46b951","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alatteknik-makmurjaya.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alatteknik-makmurjaya.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28e81ccc-1aef-5469-b6d0-04d9aee250cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alatteplease.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alatteplease.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d53a1bf9-6539-597c-9376-59e537c0d566","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alattin33nesine.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alattin33nesine.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58cec216-04bb-591d-bd88-b3ba5295dd03","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alattin35asus.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alattin35asus.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1c1c1c3-1f70-5226-8e5e-203e69c8cc50","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alattin35tam.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alattin35tam.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bef53ee-b322-50d8-8db6-fbd351455bd7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alattiyagardens.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alattiyagardens.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f7009fa-a81f-5159-a83c-03e4f4b6e1a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alazaddkbusiness.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alazaddkbusiness.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76b6f4d9-3f13-586a-a7c6-821c823e97a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alb-update.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alb-update.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7209e976-6e65-5314-a09f-6c7bf6b1e7ac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: albabridge.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albabridge.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65c429da-f7e1-5fe1-80ad-dbd23968ebac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: albafarmers.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albafarmers.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05dc8405-7416-5a3d-a550-bea656f5f0e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: albaglanz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albaglanz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ddff232-9567-5f8c-94bc-38c77b559845","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: albaharbcci.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albaharbcci.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c79b5b69-c5dc-5ae5-8443-4bb157481534","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: albaniavisacheck.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albaniavisacheck.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43f4e70f-4bf2-5d63-8104-ceed553b67c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: albanyinjuryattorney.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albanyinjuryattorney.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d60dc8c-8f11-5675-8a0c-49fcb5303f0f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: albatron.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albatron.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d46b035-604c-50da-9978-9bde453d8f43","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: albatrosselectronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albatrosselectronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed82b95e-b82b-5e86-9f26-55dd9f1b2fa6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: albenabusinessgroup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albenabusinessgroup.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f88d1f9-2893-5ef4-b3bc-3a5704793c52","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alberta-firstaid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alberta-firstaid.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62070821-6a93-5f7b-ad16-a4d56ad0c85f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: albertaattorney.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albertaattorney.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c968ad34-93e8-51a7-a956-2038a7e786a1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: albertaattorneys.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albertaattorneys.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ec36751-09e0-5fff-ac49-6f6509d974e1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: albertastartups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albertastartups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dd48e72-1fb8-5ff0-b05f-8aea443dc23c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: albertineregionsafaris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albertineregionsafaris.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1351765-804a-5c09-82ee-743e9f71d6a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: albertuptattoo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albertuptattoo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebf29a37-e0e4-502c-abb3-497c13127f7e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: albertwhitematterresearchinstitute.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albertwhitematterresearchinstitute.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52aaa3c1-cae5-57d7-9d0f-ac046b09f78c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: albertwhitemattterresearchinstitute.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albertwhitemattterresearchinstitute.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--638b2e99-bc69-53ff-abc6-74f822aa51e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: albion.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albion.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13b7aae9-2351-5d3b-a1e2-26471fcf1afa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: albitcoinh501.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albitcoinh501.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70422dee-b455-5849-af23-3a9880a46435","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: albrightstonebridge.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albrightstonebridge.cloud']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38b58716-d752-51e8-b48f-d57ad87d6177","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: albumgroupsatellite.makeup","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albumgroupsatellite.makeup']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6366ea76-185b-5fa4-994e-f336040a2193","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: albuquerqueelectronicsrecycling.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albuquerqueelectronicsrecycling.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6022f119-8c7d-59a6-af05-5b3b777ccf9e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: albuquerquemassagetherapies.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albuquerquemassagetherapies.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2861d3b3-912b-586a-9a01-2274193d93b4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alcanzaglobal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alcanzaglobal.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ee86a22-8eda-5175-8072-65ffece7026e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alcanzaleads.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alcanzaleads.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9053bb0b-354a-56a8-a7ad-4dca23fbdb7a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alcarrepairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alcarrepairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de255d53-23cb-5227-a537-7feea08b4989","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alcedosgroupservicellc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alcedosgroupservicellc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d9b2efe-75fe-542a-88a2-67a095431f6d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alchemistcreditrepairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alchemistcreditrepairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e0035ca-7493-588a-bdfe-e54818bed7cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alchemymatchesconnections.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alchemymatchesconnections.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b048ff72-087d-5ab2-aabd-8ba32e399352","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alcoholbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alcoholbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80705ce0-db0b-596e-b9fe-ffabd95003ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alconnecttv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alconnecttv.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d83895f6-8034-5689-ab7b-d172349be68d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alcostanzo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alcostanzo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffa094ff-cdd1-5b8d-8f21-644467bca373","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alcovemac.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alcovemac.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aa115fd-bacc-50f2-86fb-b10e5561530c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alcuinabraham.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alcuinabraham.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f71c1c51-0a5f-536d-bae4-69aeb889c195","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aldangroupsac.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aldangroupsac.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55e0a2d5-20f5-5a02-91c3-9b5744a5ef8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aldenpattersonanddashwood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aldenpattersonanddashwood.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fae9316-3588-5a3a-b7b6-69c29081fbf5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aldentrustplc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aldentrustplc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5971478-5e65-53e8-b970-95772bb91e94","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alderbconsultings.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alderbconsultings.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a968410e-e38a-5d3b-95bd-1fb29f06d1df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aldridgegroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aldridgegroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a70d724e-e20f-5db5-becf-e60acffc2394","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aldwarkbridge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aldwarkbridge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd3b332-ea08-5035-a544-74d07dfc5878","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alegatesecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alegatesecure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc2cada8-3391-5c18-813e-d4e6af88dc02","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alegrefarmsresort.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alegrefarmsresort.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3e0fbf3-07b2-5e6d-91dc-404d093d8248","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alejandracarranza.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alejandracarranza.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9827b87-731a-5b5b-beae-99220f2fe371","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alejandraplatt.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alejandraplatt.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd5ff950-0f7a-581c-b087-1f16bdb2f538","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alejandrosanztours.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alejandrosanztours.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31e47397-cc9d-50fc-864e-8e6cc3915d52","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alenabukilic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alenabukilic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21a5a7f8-4fb7-512b-9569-14434b2e5895","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aleppo-first.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aleppo-first.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df41d603-09d0-5d19-9c12-39c7f1b09260","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aleppo-firstzilo.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aleppo-firstzilo.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89fcff5c-4927-54e4-a019-9bb6be4925cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aleppo-monadian.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aleppo-monadian.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdf85076-7945-5d7f-84ef-258748506585","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aleppo-trust.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aleppo-trust.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55cbf72a-a44e-507f-90f5-a48b1839aa3b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alerassabase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alerassabase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--640973b0-3d4a-5a25-870f-ca982e8aaf79","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alert-apple-info.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alert-apple-info.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a3dac7a-6194-54de-967c-459f0c52c1e2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alert-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alert-binance.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c44956cd-24fc-516f-92f4-afc828643245","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alert-cibc.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alert-cibc.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89460c1f-e0ea-510f-afd2-8a9b01bfd5a1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alert-discover.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alert-discover.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00db8115-7c41-5b84-b375-420866634641","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alert-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alert-gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a494baa5-ba4b-5c22-a9a3-44787e5e28c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alert-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alert-kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f0a3733-d9f2-5736-87b8-3750db856743","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alert-netflix.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alert-netflix.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c05fa279-f410-546b-a286-b4cd28f35f99","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alert-secure-detect-safe.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alert-secure-detect-safe.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--150e5a2e-f81a-5fd5-862b-50fbf1ea3a38","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alert-support.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alert-support.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--124de712-817f-5a18-82be-8bab5b8d385d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alert-supportclouud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alert-supportclouud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3306308-b2db-5be2-8470-c9dab48d1d13","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alert-twitter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alert-twitter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4de5c89-1761-51f9-aef6-534c544eeff2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alert-update.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alert-update.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64015dc7-9b0e-53be-b264-ec2a6706d07f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alert-usbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alert-usbank.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb9a6f70-ebed-56e4-b05f-8d167cdb1f84","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alertairsystemsinc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertairsystemsinc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64976bac-3547-5c26-a1c2-8b6cebc41754","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alertasapple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertasapple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e21890d-18cb-570b-b34c-190a4d92429a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alertasatelital-findsupport.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertasatelital-findsupport.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--250abdc7-2d15-5e83-a166-ef29b2db87d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alertesecuredarty.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertesecuredarty.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acead5dd-e32c-5ecd-b3ab-9c49206fe258","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alertgoogle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertgoogle.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bbb4c38-b94d-5ea3-9b42-f517df4176b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alertlost-support.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertlost-support.cloud']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbe5bf43-cf84-5dea-822b-9203ae137377","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alerts-cibc.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alerts-cibc.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--082a8d6e-7290-5136-a38e-05a1b82f5dc1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alerts-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alerts-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b7904bb-49ce-5ec5-909e-5463acce15e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alerts-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alerts-gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8caf77d6-7fda-5053-9fa6-dd6600892f71","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alerts-id-support.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alerts-id-support.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--512f9242-a72a-5160-9d75-dee2574da68f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alerts-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alerts-kraken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f888e0c8-cff7-5033-8646-28d1e5238574","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alerts-map-supports.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alerts-map-supports.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e87232fd-6b54-5f82-82f0-edd68635188a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alerts-twitter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alerts-twitter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--800280d4-4cc8-53e4-8a75-209f2f33641f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alertscoosasupport-1c.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertscoosasupport-1c.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--693ee4a0-8853-5e25-97ff-e24556bb096a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alertsecuredetectsafe.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertsecuredetectsafe.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eab0756-da21-5c38-8ea8-5221f5fef37f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alertsecuresearchsafe.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertsecuresearchsafe.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88ecde08-1245-5ea6-8471-64131915c892","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alertsforcrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertsforcrypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cf81224-e65b-5893-b6db-e0cbb1d794e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alertsgoogle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertsgoogle.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3b010fa-a292-5435-9525-08fb92d9b083","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alertsinterconnectuserdigital.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertsinterconnectuserdigital.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01e6338b-0628-5dd2-83a7-8fe23252a6fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alertslegacyconnect-1f.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertslegacyconnect-1f.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a7e7ba-0c09-564e-beba-5bdb5fbb9895","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alertslegacyconnect-2f.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertslegacyconnect-2f.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--444ad97e-3dbf-55a3-9bcf-3f908c188de0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alertslegacyconnect-3f.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertslegacyconnect-3f.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68f7e256-a182-5f91-8405-0a28a726e2e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alertslegacyconnect-4f.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertslegacyconnect-4f.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2142ab01-cb73-5449-b732-8adf56e4be9a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alertslegacyconnect-5f.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertslegacyconnect-5f.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a47227da-bb71-5309-9120-afc7592fd145","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alertslegacyconnect-6f.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertslegacyconnect-6f.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--473df143-6930-5195-af60-12cfde8a6c9b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alertslegacyconnect-7f.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertslegacyconnect-7f.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fef8cbb-3afb-5c1d-ab30-978246a35785","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alertslegacyconnect-8f.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertslegacyconnect-8f.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aaec30b-4fca-579d-814a-3ce8fa6d33bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alertslegacyconnect-9f.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertslegacyconnect-9f.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddfa4f16-1e11-5097-886c-4b5e5e59765b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c278580b-3405-57cc-8539-1f15dc383c41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandraathearn.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandraathearn.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ddfc96a-75c9-5060-895d-d0472debe0d0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandracareddu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandracareddu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3cb776b-b710-5d5a-9881-79b1bc2ac090","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandragerman.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandragerman.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7d04667-c59b-52df-88f2-688d226b71b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandraleon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandraleon.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48694fec-32de-5a42-b292-5efdea4e0502","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandrasbeijos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandrasbeijos.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f455371c-d88b-50ec-a002-a2cdce758f17","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandrashop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandrashop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc22994e-d687-50c1-8c19-6c1146e72f4a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandratours.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandratours.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bca5ef0a-e0ca-5351-a9a7-49e5b0f06ea7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandravitoria.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandravitoria.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fec77b33-4376-5760-be4f-e431a3d0f1cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandriaybslf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandriaybslf.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71ee453-af6e-5930-bd19-d96773f4b806","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandro-safina.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandro-safina.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89b59094-58a8-5eaa-ad72-93d2b54d6c39","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandroberlusconi.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandroberlusconi.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad132afd-0343-5b5c-a026-83b0f9121562","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandroberlusconi.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandroberlusconi.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e1b8580-d627-5a19-bdf2-3941676c6ef7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandroberlusconi.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandroberlusconi.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--665bbe12-425e-55c2-b7f7-152076998eb4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandroberlusconi.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandroberlusconi.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae928c4b-ca67-5f9d-8bc9-05edd329dca1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandrodiamanti.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandrodiamanti.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40d3cb8c-08fa-5104-9d8e-fb6f2b907626","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandrodifrancesco.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandrodifrancesco.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5c5dfdc-d717-5dd6-8b64-79d0494f8460","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandrodontello.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandrodontello.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5acc945a-8e0c-5aaf-bddb-cf46a75069b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandrogattuso.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandrogattuso.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa753f8c-9ffa-5fe5-ad0f-e7946b80ef4b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandrogenova.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandrogenova.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e15c0509-433a-573a-9729-a9feac668265","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandromeggiato.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandromeggiato.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--036b5f1f-abbf-5f4f-9eaf-e1aa3372cd5f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandromenchini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandromenchini.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64648fdc-b247-50ef-9036-a2094f6a6de2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandronivola.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandronivola.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa3d1565-190c-54b3-8f95-38c0209316b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessandrotenentes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandrotenentes.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50bd1978-0e4d-5714-860e-13fcc06a816c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessanet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessanet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98a9c820-385f-5fe7-96e2-66b144dc9c66","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alessant.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessant.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae2762a1-3034-578a-9d57-b1f43a25a959","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alesta201417gmailgob.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alesta201417gmailgob.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26483dbe-2813-5a77-83f0-7f1b25a22761","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alexabitcoins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexabitcoins.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2b08047-aa05-5438-a8a0-d2e7b032530f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alexahairstylist.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexahairstylist.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34725259-1f1b-5029-b167-1ad89ffce94d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alexander-ghametnabashe.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexander-ghametnabashe.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--178e4552-a3f6-5a00-8ae9-312286a1e4ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alexander-rally.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexander-rally.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a6eec10-d412-57ad-a900-d90a04f6e2da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alexanderdiscovery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexanderdiscovery.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e27a90d8-f44e-5d2e-9c33-d229777c1b3f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alexandersdiscovery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexandersdiscovery.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bb1a224-e4db-51b0-bc71-b2b8608751ea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alexandreratte.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexandreratte.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8753dc64-d1dc-5b98-8d24-4558c3acdb0a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alexbalanzas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexbalanzas.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5a91263-c080-54c8-a838-4ecd24d3ac53","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alexdepasetattoos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexdepasetattoos.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fbc9ff0-7166-5ab8-b106-7127697db562","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alexiabarnaby.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexiabarnaby.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b0811b-6cfb-5544-bd83-753d959cfeb7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alexibase.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexibase.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7327e204-82cd-581e-b1f9-0a077c4177f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alexissablone.bio","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexissablone.bio']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dbd8e4f-fd3f-5c29-96a4-9eac8a1f5d15","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alexissantos.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexissantos.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14af15be-dffc-570f-b1fb-4097ef8d969b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alexkirsergoat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexkirsergoat.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d8101e-2764-599f-b3ee-d838eb1145de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alexmattsson.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexmattsson.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a52ec2a-c277-5440-b141-c0a4a25f7a4d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alexnab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexnab.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc26abbf-4980-5665-9f20-a25ce9e58f25","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alexpanzer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexpanzer.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d09d6031-685f-527f-8526-4089343fe09b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alexskillyterrierpups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexskillyterrierpups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3471c34b-4ce8-57ce-a897-53c65b5d8f3b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alextrustbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alextrustbank.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8cb5e13-84b3-5dc8-9690-d124322331a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alexwise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexwise.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a40811aa-dfc7-5bb2-a141-9456ee66a368","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aleynabsdsfair.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aleynabsdsfair.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14d2a3ef-74ab-5a4d-9fdb-5d031f7ed8e2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aleynabsdsmilyon.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aleynabsdsmilyon.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--326045c7-a68b-5c91-be95-1afbbc9d2789","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aleytarbonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aleytarbonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcec97ba-2e60-59c1-a747-640e3fc54efd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alfa-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alfa-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a4270c9-d606-58ee-8a93-86448f2f9aac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alfaelectronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alfaelectronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--994acc45-a8b4-50e6-aa61-44911a4debfd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alfafarmakeio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alfafarmakeio.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3188606d-ab38-5c99-834c-738e766141fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alfairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alfairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00f65765-8c65-5f27-9d8c-a423f5deec95","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alfanyssa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alfanyssa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bff018c8-9dda-5a52-aee6-b30f314b7913","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alfarajgroupsa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alfarajgroupsa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--128c0e3b-8768-5349-a4e1-72fbfa3dd37f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alfayrouzfarms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alfayrouzfarms.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--265415ac-d6db-553c-a9b2-3c503e8b0b77","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alfdever.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alfdever.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a618a6-10d8-5c0f-b95f-d190ebebb8a3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alfirsonasset.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alfirsonasset.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5a29691-1b22-53ca-ad67-eeabf48cc8da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alfityattunmuslim.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alfityattunmuslim.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5508539-e48e-5fbf-87c4-a2f745b6b52c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alfonsoquintas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alfonsoquintas.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--732be20b-d669-5f28-9d78-365ddec20dbc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alfujitos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alfujitos.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ad28aff-e809-5c49-bbcb-13676ae0ebce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: algarvefarmhouses.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'algarvefarmhouses.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5c6d913-b284-58de-a1af-ccf37d1d5343","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: algattonero.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'algattonero.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--852dfd58-1a68-5600-94ed-6b716e557b41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: algeria-visa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'algeria-visa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d566264-0b32-57b1-86ae-ac8a868879b4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alghanielectronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alghanielectronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7455b781-c605-52fa-898f-0771daf8a269","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alghassanmarineshipping.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alghassanmarineshipping.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86ebc89f-7872-55a9-850e-fc3d2afb4d6d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alghassanmarineshippings.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alghassanmarineshippings.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6388ace-5c37-5543-a881-a7be2e77cf69","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: algo-wallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'algo-wallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63afd90b-7bf2-5544-8770-83e1301124a5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: algoaitradingbot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'algoaitradingbot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfab6b9a-da86-5b1f-9098-e2f5b470595c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: algomabridge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'algomabridge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6edbb48c-d322-58f2-8c7f-aa6f1c042d88","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: algomint.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'algomint.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9eaba6b-1b2a-5d39-a9c2-d9fd2e3b90be","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: algomint.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'algomint.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ce6be2e-6745-5574-8713-b4e38919986b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alhendigroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alhendigroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76d6e4e1-7558-5866-8502-800b35701450","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alhussainenterprises.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alhussainenterprises.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6df1535a-edab-510d-a119-1590c2b27700","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alhussainindustries.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alhussainindustries.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4663db9-cb17-560f-9260-58e8a6de57f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alhussary.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alhussary.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddf58296-8412-557d-8c8a-e33c233c3dcd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ali112bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ali112bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23188ebe-6742-50b4-b40c-db8a176e6455","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ali112bonanza1.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ali112bonanza1.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf88f854-a200-5e8e-8867-bc7d9dacaa05","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ali320bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ali320bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e117952-b495-524b-9d8f-abe1cdcff102","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ali3435bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ali3435bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74acbb34-a4a0-57b6-bc96-7a83025e7a65","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliabhatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliabhatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2296fd7-b09c-522e-ace6-f4ab35cb3e30","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliacibuca063gmailroyal.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliacibuca063gmailroyal.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88f54d50-eacf-56b7-812e-95c4b92bfe28","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliadierbonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliadierbonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--caef66af-9349-5840-b344-3189a8b6675d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alialiali27bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alialiali27bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef28e8e5-2b27-5497-a3d3-bc2d7e1c1a47","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianza-companies.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianza-companies.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d5f0802-a6f8-5da5-b13d-5fab1a167f81","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianza-gourmet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianza-gourmet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408e3295-60cb-5373-9f2f-f681562e3628","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianza-us.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianza-us.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--647b2709-78d4-5dbd-ab80-3f7f743770f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzaarboles.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzaarboles.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c3f4938-8028-5a11-9131-54337938faae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzacerohambre.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzacerohambre.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c01f37c6-94da-586b-9052-847ca0b95916","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzacodess.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzacodess.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--877dca18-5a0b-5229-a908-411f0974cee3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzaconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzaconnect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0d36e4-2058-5104-8af3-604e647a1fba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzaconnects.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzaconnects.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32a84a38-74f2-5769-a57d-0db773ab8dcf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzademujeresexitosas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzademujeresexitosas.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20d760d5-5305-59ec-bf97-7a58853aff08","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzaeticaporlasalud.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzaeticaporlasalud.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d697053c-0a0f-5ec5-ae61-7a81b286a3db","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzaf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzaf.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7895d99a-43c9-5e14-95dd-d9c20bf476de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzagrouponline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzagrouponline.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--763983cf-0178-5c49-8073-3d05566269f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzalabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzalabs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5b0979b-0559-5fb0-90ea-5d6371800168","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzalb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzalb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0120c8a0-599e-5c07-b9a1-5c0c434ade2e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzamedellincerohambre.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzamedellincerohambre.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c93461eb-8611-5185-b6a5-dc52de0aed95","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzametalica.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzametalica.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2f4d6dc-d6dc-5052-8389-3aeb5ba54ebc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzamultilogisticamag.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzamultilogisticamag.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3bd21a5-6b58-59b4-9767-7e0be7715ea7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzamultiofficiesimobiliario.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzamultiofficiesimobiliario.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae4fd0c1-6ffe-5653-95b9-708768742780","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzanow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzanow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53adf3d5-db8a-5b6c-a97b-9d1e9e437352","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzapetrolera.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzapetrolera.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f60fa7d0-024f-5490-aef8-e120a39a18fb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzaporlalibertad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzaporlalibertad.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83730923-67f5-5393-8a9d-a46e09e3fec4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzapura.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzapura.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e27e9d01-1cce-5a20-958b-d915fbc6206c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzapura.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzapura.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c6007e8-fabf-54e0-a625-1085a4b02778","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzapura.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzapura.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e9cf1ce-ca5d-5584-92d0-45e9572bfc9f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzared.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzared.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e3bc675-2282-53ea-860e-c2747b917208","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzasdeboda.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzasdeboda.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ed2fc82-7f45-5c81-bc79-2b3db51e5303","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzaseguridadvial.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzaseguridadvial.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8ea4619-897f-5fd6-bccd-b991ec9326ef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzasocialeducativa.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzasocialeducativa.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bceeaf07-1173-5317-9831-ccae33389744","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzateamonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzateamonline.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54db9e45-0386-5974-831f-566f417c07e2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzaudh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzaudh.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed16def8-bda5-5763-a6b7-91da7074d03e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzaxpress.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzaxpress.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfd2c4c1-6c9d-51fa-b281-47bb38421d2a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alianzworldwidecare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alianzworldwidecare.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9194d7f-ed78-50db-8623-85d2f83a75be","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliassafiart.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliassafiart.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aae9e220-d852-5c4c-b859-6b2c9ff74b86","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliastoken.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliastoken.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68e2e29a-6cfc-515f-9d08-e98ba355f095","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-career.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-career.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb7a1899-5086-567c-97b6-72b07cdbaf61","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-ddos-guard.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-ddos-guard.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d738fa76-ca27-5e48-8fc7-2e0929d09296","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-dme.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-dme.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--155aafdb-50f3-5055-b4c9-5c37784c26b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-dme.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-dme.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03d8936-f664-50cd-be04-7b889ac3468d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-drive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-drive.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1afc4b5-bdfb-5548-b3ab-9a514fe5b208","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-floor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-floor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f20bfcd9-1a2f-5ee1-ac61-09f99d81e174","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-inc.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-inc.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79559139-cdd8-572e-9d6e-795b07a1eba8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-inc.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-inc.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c742f6f-668f-54cd-aa4c-fa80d07b6836","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-inc.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-inc.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2dac864-3214-5888-bcff-cce01396ef63","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-inc.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-inc.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c897b8b9-1532-547d-87f4-5eb0640c5945","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-inc.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-inc.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9688f1a0-bbd0-5350-bcd0-3ac7761bd18a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-intl.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-intl.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c29548f-0c7c-580c-8863-18764ddc8f72","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-jqvzmla.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-jqvzmla.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ffabe91-fb34-535e-9cc8-5f5afdd8eddb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-kqvtx.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-kqvtx.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ca6d585-34eb-5326-acde-26211780cd0d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-nqytrla.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-nqytrla.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc9a80b1-958c-544f-93e2-f436f7f58eeb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-persi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-persi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ec9d3cc-76fa-5e8f-9c13-dbf1babcec34","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-pound.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-pound.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48e71ced-4a0e-5935-8d00-775059ed756c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-report.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-report.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4650622-2ea3-54bb-96eb-9904bfabd7a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-round.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-round.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--172b3c8a-98a9-5d7a-a649-657c313c9de3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-storage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-storage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d41ee44-ae05-5b5b-99c5-6e552f051933","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-tobaco.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-tobaco.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--082dd305-8a30-5fa8-ab62-cab8545e53ec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-training.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-training.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d519075-2d95-5596-b5c3-f9832353247e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba-workout.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-workout.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7110840c-c762-523d-b170-4a1dfba6360a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba123.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba123.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32bb44b2-ee19-547c-86b0-9997d1ba7f48","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba123456nesine.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba123456nesine.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c7c0bac-a752-55e2-9844-ca890bc9aa85","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba168.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba168.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--198ee49e-b949-5a91-8d12-9c4d3bfb4c5b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba168.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba168.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56a5b8c3-4fda-5f64-b48c-a481aeddaf1d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba178.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba178.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--106a8dd3-8e0f-5839-9926-93e26a9e99b9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba188.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba188.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67221d37-bebc-5df5-a0be-fe251d6f6d34","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba188.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba188.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a59afba5-ded0-5de4-8cd0-5a3f4a5c686a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba188.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba188.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37f72fee-7a82-51b0-adf3-45d55cd4aa04","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba1985asus.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba1985asus.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--255fd4d1-9cce-584b-b350-3c98b96bad90","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba2222.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba2222.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bc1c12d-8158-5103-99f7-7ea517b4564e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba33.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba33.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac096b41-2b96-5732-9b4f-c62ad86c5752","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba33.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba33.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7193c30-5334-56e9-aaec-ddb7c0f3c56d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba33.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba33.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a05d7e6-f6eb-56d2-aff3-a7ea0113e56a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba33ori.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba33ori.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4732a94-7f7a-500f-a64f-93aca9e100f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba42royal.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba42royal.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad97cd2-c355-5270-90f2-dfa51f8fbc9a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba55.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba55.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9346324b-9892-528b-aed4-7147fad32c62","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba555.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba555.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83bc3c6b-ef98-563e-a660-4144be35c4fe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba77.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba77.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--339cabc4-1f48-5988-a5d2-acabfc80f3d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba77.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba77.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c142e5c-e8da-5d44-9d76-4932c4632050","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba77.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba77.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a72560ea-9fc0-5b62-9413-fc12412aa0a1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba777s.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba777s.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d30ef4b-0ffd-5bd3-9759-16eca55edbcd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba77link.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba77link.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bf069ce-eb7b-540d-8e45-e96885adedf2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba78.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba78.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a9b4217-3f1f-53e9-b39f-3761ac043b7f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba8.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba8.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--802e3013-0944-5907-84e1-833837a12ee6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba877.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba877.one']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc3bc1b0-5ad7-5243-86c1-bc731e2fa50c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba88.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba88.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c00eb0f0-baad-58bb-ac55-b9b238b4df19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba88.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba88.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c177d77-057b-5bba-a559-8d0c9cff5402","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba888.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba888.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d7639bc-9de9-5aba-bf5b-18952557c3f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba88club.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba88club.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac4dc7cd-e5ab-5b95-bd1c-f383386ab11c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba89.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba89.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d41ba6-bcef-512d-9e67-b22dd67fcfb1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba89.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba89.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11f7ac34-8e0d-597d-a57f-608538b4db6c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba9.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba9.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba526a76-5ac9-58de-bbba-857e23e9d227","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba9.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba9.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--546fa0fb-2eca-5097-8c51-ce1770b22d09","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba9898.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba9898.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d55d220-a179-5e1f-b219-9ca3d2341983","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba999.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba999.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd36af94-a17f-5a28-9726-2527c17537da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba999.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba999.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe51bb28-1dc9-5b7c-9fe1-cd7d49f5da6a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaba999.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba999.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e03a27d-c24e-5d55-832f-ab91f0cc9f56","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabaabacus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabaabacus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5df9619-caeb-5558-ad6a-bb8cb3aa5d31","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabaai.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabaai.cloud']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24f61726-fcec-57d2-b3d0-17c634595ee8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabaapk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabaapk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e11aa8e-d598-5092-ae38-dd149445f7c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabaapp.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabaapp.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d22b06f-fc77-5717-a846-adc227e7944e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabaapp.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabaapp.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--580b2e14-1b21-5c8e-be19-f25ee01d81aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabaapp.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabaapp.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09e45663-514b-55af-ae50-2ac5eef882ec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabaapp.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabaapp.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8157d31-aa20-5e92-b7fb-1bcfd9732b78","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabaapp.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabaapp.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02a6eca3-ea59-5808-93bc-4b25b1017762","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabaau.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabaau.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58511c67-aa96-5ac0-9e96-2cdb3c433dbb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabaaus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabaaus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e659ab8a-6da9-5377-8966-64170e9fddc3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibababa.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibababa.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--227c46d2-ec8a-5b65-ba64-85f137a5c1c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibababdshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibababdshop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--861e7129-d885-5ff6-9070-f7a3de248ce6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibababet88.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibababet88.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17b8ab23-03ec-5642-bbb7-4817820d75f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibababet88.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibababet88.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--376378f1-deb0-5b15-88d9-31124d344e64","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibababet88.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibababet88.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8374553-fca1-5505-8e5b-68f00b4cd9b7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibababet88slot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibababet88slot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f13dee76-7640-51ff-884c-f0e6cc37cf85","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibababr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibababr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9033f791-669a-5d72-aee0-24ba90486168","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibababuffet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibababuffet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7405ec3b-ae37-5017-ac79-0e5dc67f7586","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacapital.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacapital.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91167660-9ab9-5450-a7c8-99e5dc4cc158","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacapital.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacapital.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aca569fe-82ec-5baf-8fdb-332d3da844fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacloud-tencenta-m-azon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacloud-tencenta-m-azon.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d3faee-2131-5339-a72a-35d728cbed93","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacloud.download","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacloud.download']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7705ab42-8911-5334-95e4-185cce04c444","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacloudlink.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacloudlink.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11aa2d89-3ea5-53b7-85fa-008e7337b4de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacloudlink.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacloudlink.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e552239b-6c04-5bb9-8395-b9aea97826e2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacloudlink.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacloudlink.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1789b5bd-4199-536d-af78-43b3facb709d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacloudlnk.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacloudlnk.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf8e01f-8ed2-504f-8f59-b4dfbad62fbb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacloudlnk.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacloudlnk.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddbce6ad-2f09-5cc7-819c-9c5cb29e5ba0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacloudlnk.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacloudlnk.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63bac42b-53c4-59e2-8cbf-9720d85e241d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacluod.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacluod.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4df7100d-b311-5dda-ac4c-67241840e627","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacom.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacom.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1f39d95-24a7-56fe-8826-b68d62b2a467","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacoma.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacoma.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28adf2a0-1aa5-5fa1-82f7-578b7370fc03","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacomb.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacomb.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f1ddb9a-0403-58b5-8dc3-d221a26613c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacomc.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacomc.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--247e1ecd-0df0-59ff-8fcb-733a00fdd201","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacomd.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacomd.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03169879-948d-5f34-8af4-c06c058608b8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacome.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacome.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5ad9d72-80a9-5c34-80f2-773c85d111bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacomf.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacomf.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5513debe-46d2-5912-aeef-2a2d5532cb61","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacomg.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacomg.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54a6060d-7337-5e47-96b2-f61726aac476","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacomh.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacomh.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b04e84a-b3ab-5a94-ad38-1fe82d6fd927","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacomi.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacomi.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d77b329-87ab-57af-9dc2-b54224646a3e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacomj.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacomj.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27ef54b1-8d59-57d6-8b91-66aa228e46bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacomk.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacomk.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b43f3b11-5a3a-5a14-bd30-b842a8d2e84f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacoml.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacoml.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df60e8aa-ec21-505a-bf99-602eeb814e95","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacomm.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacomm.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cafd2b75-a6a9-5986-8ff7-ee7b37752d10","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacomn.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacomn.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d2301f8-5c96-5b6c-bea7-26b56a59437a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacomo.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacomo.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe9f0f03-0049-5dd0-9ea8-fc2428b0aebf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacomp.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacomp.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbcaeb54-2e94-528a-b2e7-350ffcbc73bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacomq.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacomq.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdf8ba36-a98b-514b-a6e6-f259dc89cfca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacomr.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacomr.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21ac2c21-4364-52bc-becd-8203f5cce887","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacoms.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacoms.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3ca1d1d-c684-5165-8548-c8feb2051aa4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacomt.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacomt.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--283120f5-0f31-59f4-bfa6-b64e66902536","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacomu.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacomu.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89fe7b66-cd19-5784-83bf-97ddc455fa3f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacomv.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacomv.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--106042d0-3e4b-54f5-b828-b6211287d5f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacomw.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacomw.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f41aff85-83f5-5d2a-952d-1beb4d91823d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacomx.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacomx.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d5e9d7-2578-5716-bdd4-55cfa834b6ae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacomy.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacomy.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cb1c3c0-3559-563b-bcfd-15d7da11cfa6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacomz.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacomz.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83fba864-319b-52a3-a333-1e04d3486707","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabaconnect.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabaconnect.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92021f2e-24a0-5c99-aea5-95365c8c677d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacorp.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacorp.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf19762a-c994-5503-9d24-8303467cf556","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabacorp.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabacorp.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f60a336f-1411-51de-859b-42375388c576","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabadaiyunying.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabadaiyunying.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4baf1249-bb74-55c8-b5e3-a9b85738ca14","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabadesign.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabadesign.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2097355c-cdb1-59ae-8e16-8c0fd2922962","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabadevice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabadevice.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c202dcd4-a127-5342-b215-7f031c122b19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabadns.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabadns.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dd13fe0-f70a-5264-98eb-2f7bcf6f4ab0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabadns.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabadns.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2baa6d7-b2aa-53f3-9dbf-90f841abcd9a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabadns.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabadns.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--835ea4be-cb68-554e-a0c2-5580de28ee09","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabadns.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabadns.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f59bee00-e523-5f4f-abad-bdbce6e9756d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabadoctor.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabadoctor.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--341e92d5-e4f0-5c90-b822-615bfb54719d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabadoctor.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabadoctor.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c393f58-9ba8-5a5f-80f5-4b991ea3f507","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabaduners.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabaduners.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07e26ad1-a319-599b-be90-46325940183c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabafonts.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabafonts.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28d29e7b-0696-572b-b58a-56af6eda7941","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabafonts.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabafonts.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2168e677-5789-528f-b395-c8e344d5f660","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabagames.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabagames.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ac6bfde-cdeb-5288-9f75-f9b3b4cb62c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabagrillades.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabagrillades.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc2b0a5d-b9ba-5c9a-83d4-472b3ed07dba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabagroup.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabagroup.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a435de4-4aa4-550c-9765-5e7d08244ffe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabagroup.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabagroup.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d08c66d-5753-542b-b36e-712f196ea3ae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabagroup.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabagroup.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86663898-89cd-5eed-b423-3411193652b9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabagroup.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabagroup.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28547168-42a8-557f-81aa-39ef71265a16","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabagroup.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabagroup.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01305dff-5afa-5dbf-bf5f-b0c665f5b646","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabagroup.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabagroup.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b67bf26-f5d3-5abd-ae5f-93c2129a0818","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabaguojizhanyunying.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabaguojizhanyunying.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fcd9d6c-e467-5273-89c0-b84f1b6f8544","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabahealthdesign.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabahealthdesign.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--deb8b779-d824-5070-b1c0-b8fee6b3779b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabainno.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabainno.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23621285-998b-520a-8192-c1ce3e677ddb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabainternational.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabainternational.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c22ab1e-df3c-5c66-b62c-7e12f814b4fb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabainternational.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabainternational.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b00b45f-7cda-5907-86d8-b2838e532771","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabainternational.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabainternational.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--068b5613-6d05-54f6-987e-211a969c37f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabamarts.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabamarts.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73043436-1234-5a43-9da7-0680d6a6c44a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaban40.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaban40.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f8691ef-07b1-59af-b3f8-b6eb7a2882ac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibaband.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaband.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dde10d4-3cf3-548b-93d4-3227da141d6c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabanotebook.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabanotebook.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60182025-0cab-5422-baf3-fe70bb9be47e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabanque.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabanque.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b8c9053-06bc-56ab-8242-290a3d2a0f4d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabapics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabapics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ec3a7b6-52ed-5560-922b-8a58f476831f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabaprocessing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabaprocessing.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ae409c6-ef59-5689-b6fe-bb52b0fd25f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabarecruitment.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabarecruitment.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25ee2420-5512-5bbb-8461-732bccac39b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabascientific.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabascientific.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7141ba2-f5f1-5d2d-a3c0-e54a0e71df36","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabashopping.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabashopping.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f531fe22-a867-5a59-88fc-82a4c43f4453","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabaslot168.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabaslot168.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30bfdd74-bf21-57bb-9683-3e824d558c61","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabaslot168.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabaslot168.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b875cdb-ac0d-5863-b62e-dca16e5840df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabaslot168.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabaslot168.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e59519b-3db5-5454-bf00-307b79bb5c2a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabasmart.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabasmart.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ed71b97-a330-5891-9186-c9982712ce1c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabaspartanburg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabaspartanburg.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69f9c62e-711e-5f67-bb5b-40e786cfcc17","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabastorage.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabastorage.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7975defb-4142-5ba2-b656-4cc9e792291d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabatech.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabatech.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d79608b7-c2b6-5c55-ac0e-5ea8442431a5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabatech.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabatech.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1362794-3f09-50f6-aa59-1efc93f49c87","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabatech.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabatech.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a737611-2e67-5087-861d-e12b1fb3dab7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabatechqa.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabatechqa.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e335f4f-07f1-52a1-8ccc-bb9cdc188fc3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabatradeguard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabatradeguard.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b012f854-9723-57e7-baee-a4c25954f8a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabatunnel.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabatunnel.digital']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ef0f984-f9bf-5a16-8e45-ccc0e966e6f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabaued.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabaued.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bfee178-ba2e-55e4-b5a0-76f68fe5c453","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabauser.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabauser.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46822e64-4175-5ad2-88fc-8197e3d429f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabavapeau.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabavapeau.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62cfbbbc-8eec-502e-b8d4-606f64916171","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabaxpo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabaxpo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51919845-ad32-5770-9e3b-665a16654ef7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabayunying.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabayunying.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38de1d38-74e4-54d8-a8aa-fd327ae108c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibabayusishidadaoda.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibabayusishidadaoda.top']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84fcaec5-ddfc-57da-8ca0-263aa5333c7c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alibestbuy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibestbuy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aac15c37-2666-51e9-a2b5-10d7104e8eb8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alican67bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alican67bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5135b0c-d763-50b1-ba3e-59677f1dffb7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alicansonmez1925gmailmilyon.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alicansonmez1925gmailmilyon.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81add169-3e27-5354-8452-0d219c615929","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alicemanzella.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alicemanzella.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c3bd985-c3eb-56d2-885c-74eb85e0aa71","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alicevintage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alicevintage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6495cf04-faca-5d4d-86ea-ebbeddbac4a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alicloudapi.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alicloudapi.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d4047bb-f147-5d60-9673-085db46ca941","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alicloudcc.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alicloudcc.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e252d5c-8fa9-54c7-836e-e0dd460f86ed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alicloudcc.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alicloudcc.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a18db7c-e9f5-5d6f-a67d-802a1773f7c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alicloudccp.reisen","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alicloudccp.reisen']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7488fe4-c31d-5997-8837-71e21e603a84","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alicloudccp.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alicloudccp.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6232d9b-aadc-56d4-b0bd-37f7b8c9a2b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alicloudddos.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alicloudddos.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26e5ee34-768c-54d7-939b-5484805901ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alicloudddos.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alicloudddos.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a3712f8-b5d8-5632-977c-48b617f7f863","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alicloudddos.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alicloudddos.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0675273a-f2bb-5698-ab8a-df0d8fd371e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alicloudlayer.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alicloudlayer.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1bfd5ac-b3fd-5d64-b78e-2114bde30267","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alicloudlayer.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alicloudlayer.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6a2268f-9898-5ddc-9b2e-6d8eaa3462df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alicloudquerys.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alicloudquerys.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8769d86d-6e25-5196-bea3-a3f521d134ac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alicloudsec.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alicloudsec.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de84cb73-34e7-521a-9ad0-57835707b3ea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alicloudsec.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alicloudsec.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebcd2397-bf73-5b60-b0a0-1ea0a6877ad5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alicloudsrv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alicloudsrv.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df40f785-6f59-5736-a963-641d0818d7d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alicloudwaf.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alicloudwaf.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdc247f7-c363-5fd1-8407-0e6362319922","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alidhossain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alidhossain.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30503a10-a9c5-5eb4-b457-cc439000a85e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alido.blog","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alido.blog']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72d93518-a4f8-529d-878c-4a9d1591be0f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alidodo.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alidodo.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00c905b7-40ae-51a1-aaeb-a9bf0996c734","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alidogan63son.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alidogan63son.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d2ca0b5-5182-55e5-8db3-fead1b9075ba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alidoggie.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alidoggie.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb3e083-7a2c-51b8-bed8-b3f2bff33b95","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alidoner.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alidoner.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c79e527e-ac7b-50d5-9645-380b5597842e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alidotstore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alidotstore.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa25b459-03f7-57ad-8e74-7188ed7ee5b9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alidouglah.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alidouglah.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54d38d3b-ff04-5e56-9585-6a90217a6656","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alienabduction.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alienabduction.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83b10709-3f7d-56ee-a8a1-14c1fd3aee3e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alienabductionblog.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alienabductionblog.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2eeb73b-a996-597a-978e-46f94c925141","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alienbases.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alienbases.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9654c1ec-539d-5bdb-8243-a18038db4ca2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alienbases.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alienbases.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--953ced16-b243-5e74-ac10-231b67774d9b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alienbattle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alienbattle.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3658cdc-8ee6-582b-bd98-28709200e5a5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alienbonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alienbonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d3c5bc7-e5e3-5c42-9c71-2ac5909decf3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliendiscovery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliendiscovery.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1ba703f-b6c7-5874-933b-f612cb88c9a6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alienebase.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alienebase.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09c42790-e723-5975-89d7-2dcabc0e6739","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alieninvasionupdate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alieninvasionupdate.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f953481-8fd8-5b03-b7be-003cf04da03e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alieninvasionupdates.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alieninvasionupdates.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcb061a2-c9b4-5e87-ae77-244f443da967","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alienonbase.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alienonbase.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--652225f5-c876-5fc7-a20b-40980a8d6e4f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliensamongusupdates.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliensamongusupdates.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bbd4bf1-ed49-5fe0-ab98-c1344abf8687","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliensmsverify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliensmsverify.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40fbb2d6-3174-554d-a5f4-1cad2c40396c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliensolana.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliensolana.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af0bb73a-4910-50c4-b5bf-ba8ad55f96a1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alienstattoosschool.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alienstattoosschool.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30ccc97b-d03d-512c-a50b-254d835a8447","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alientronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alientronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a81d357a-2ca5-51a8-808d-dc9d228dd935","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alienvault.tech","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alienvault.tech']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26a11dee-3793-5379-9022-aa7886e3fb82","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliercan42bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliercan42bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f484e8c-2d3f-54e3-9795-59d03aebf888","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliessay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliessay.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37c9656f-c7e3-557b-87e5-9be8a75902bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpress-media.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpress-media.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6924a5f2-dd98-5ff9-9924-89d66079e8a7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpress-media.work","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpress-media.work']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea249c88-d3b6-5db7-a7b4-835055090760","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpress-service.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpress-service.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f53508e-c10f-53bf-b5f0-2f58a4c929cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpress-service.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpress-service.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d20d26f-9ecf-5973-8ef7-c31e6a67d7dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpress.makeup","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpress.makeup']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca34fc91-dbbf-54d9-b733-d08478d811f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressaliexpress.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressaliexpress.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4eee029-1fc2-5c52-aef7-b420655f1253","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressapp.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressapp.one']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e254ce62-8bb6-5846-82e3-630ffb759e9d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressapp.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressapp.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0de67326-885a-5003-87fe-c74fa8ebbd0d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressasia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressasia.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c25aca25-aed9-5f94-9f52-4fb3b23bfda5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressbulkshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressbulkshop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1135020-ccc3-5226-a671-95c9d852f61c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpresscanada.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpresscanada.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82350ac7-2ad5-5f86-8703-179da297f8d2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpresscao.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpresscao.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7438242f-d7b5-513c-b2d7-7ddfd8611fc7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpresscao.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpresscao.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7d8d716-4571-5cb6-bd94-641245af9b8f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressdeals.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressdeals.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9b60eac-2265-5517-b376-1e8522641bb6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressglobal.best","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressglobal.best']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0106f33c-b42a-54dd-adc3-fb8634c44e67","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressglobal.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressglobal.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3c4c709-a9cc-5f3e-a0ae-0125892d99ed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressglobal.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressglobal.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f0423e5-d563-5af7-912c-e10560afe2c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressglobal.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressglobal.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b2773c4-75f5-5084-91d4-61561a350058","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressglobal.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressglobal.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2072c805-473a-5939-a277-039d0b386fb7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressie.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressie.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cf33f89-d22d-5a09-b5c3-468c7535639c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressmaroc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressmaroc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b401997f-c3f3-5108-9f41-17552851a9c4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpresspaypoint.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpresspaypoint.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a957b59f-bde1-55ec-b7d6-b7d648fe0620","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpresspy.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpresspy.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6430ee-47dd-5da0-af31-78013b335231","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpresss.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpresss.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8681ad54-4b74-5638-ac23-156ce98a8a9c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpresswholest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpresswholest.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8fb93ba-2db0-56f7-ade2-4a304bde3483","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressworld.art","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressworld.art']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d060d394-b341-5d25-8466-70504368f889","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressworld.blog","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressworld.blog']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94f10646-0357-55e9-aa21-00f98cc39fd4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressworld.boats","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressworld.boats']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--428824ef-596f-5609-af29-185186d576a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressworld.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressworld.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5339993-126d-5fc6-b1ba-df8aeaf45069","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressworld.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressworld.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--651e7e92-37f9-5ebc-9228-7f83c7e31aad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressworld.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressworld.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5834c633-ee4b-5105-a868-08b75668c37a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressworld.fit","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressworld.fit']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89b7caf8-6449-5f9b-90af-52625096e14b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressworld.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressworld.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39431047-dfb7-5cf6-9766-de466b52b963","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressworld.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressworld.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4ea9b3f-3c0e-53ad-b9e3-451ab13075b9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressworld.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressworld.one']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--887306a4-6d69-574a-97f6-945ec4668b61","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressworld.onl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressworld.onl']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3542cc3b-14b5-58d6-aaa2-04aa9df889ed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressworld.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressworld.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e98acbf-1680-5451-934d-ce781d41bbd8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressworld.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressworld.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b19abab-bec5-52e7-8a6d-1049d0076d33","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressworld.qpon","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressworld.qpon']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e78176d-8ed3-57fd-838a-afe7b280a6ea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressworld.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressworld.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25581f40-8942-54d7-91a7-abdc28b2dd7c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliexpressworld.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressworld.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4c607e-19c7-5ded-baf6-40aebf2f35f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alignmentrhythmledger.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alignmentrhythmledger.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38184d9e-8d8a-5c35-b28a-6d650da49a07","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alignmintcollectibles.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alignmintcollectibles.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f2a945b-be04-548f-83a4-316d9c41adce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alignotrust.best","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alignotrust.best']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--351c14ac-e250-524a-bae9-6688b6ba6d82","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alihan4141bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alihan4141bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb049bb6-8225-5178-910a-01afd8b5ff0b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alihasanzafergob.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alihasanzafergob.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83abb184-cb1b-579f-a360-2927ad23bee3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alihassandigital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alihassandigital.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--013ee9cc-89b9-54a8-8d08-9a5ab0f7778a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alihassani.bio","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alihassani.bio']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ab8c0c4-5737-505f-a275-e3cf3c53e2db","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alihassanivip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alihassanivip.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc922db2-6e6a-5a7e-a2c4-b9a3ac3ec629","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alihassanlaw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alihassanlaw.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb43bbba-595e-5798-a23a-1b7e58913ed6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alihassanrcm.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alihassanrcm.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbebf8c1-d1e0-5998-8f1f-c20667981cdd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alihssane.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alihssane.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09c78c34-cdd0-5347-9315-63a62bc546c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliianza.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliianza.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca58ee9-6ff1-5ae5-b530-ec04e821f572","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliianztravelinsurance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliianztravelinsurance.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76465472-7714-515b-ad8c-6a5e9be103b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alikaraca27bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alikaraca27bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a21507b-1b3d-5caf-8271-e8ffe1062e50","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alikrk48bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alikrk48bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca37d268-498e-5808-95dd-6d922ef50111","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alimahjour.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alimahjour.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b0ef04-82f4-5472-a03a-b10a2118f949","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alimentossanluis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alimentossanluis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea1eb1fa-139b-5a5c-bd6a-aff49f44ee8d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alimentovivobase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alimentovivobase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f838b454-93c6-56dd-a717-19734b9f0b51","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alimentsvifssante.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alimentsvifssante.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f893d04a-693c-5ee5-a680-b137e0eb5e15","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alimony-and-spousal-support-bih.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alimony-and-spousal-support-bih.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a190066-9545-567a-94ad-359162bc6095","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alimony-and-spousal-support-iqg.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alimony-and-spousal-support-iqg.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c841ad-2eec-5741-8ec0-d69c1e8cdd60","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alimony-and-spousal-support-kqa.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alimony-and-spousal-support-kqa.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eabf0ca-89d2-57ae-8302-fce7d3e75ec7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alimony-and-spousal-support-lon.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alimony-and-spousal-support-lon.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e0e97b9-22b2-55d3-904e-7338a7a9ae42","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alimony-and-spousal-support-lwb.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alimony-and-spousal-support-lwb.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cdff3c0-b21a-5383-acb3-d63ccb4545e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alimony-and-spousal-support-rxe.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alimony-and-spousal-support-rxe.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77e82cbb-d1fb-59e9-9040-3c87cd69849a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alimony-and-spousal-support-uvl.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alimony-and-spousal-support-uvl.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--583adac7-127e-52a9-bc77-5cf8b668cfd4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alimony-and-spousal-support-uzq.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alimony-and-spousal-support-uzq.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a104f67a-9acc-5c28-bcca-f06b28335973","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alimony-and-spousal-support-xaj.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alimony-and-spousal-support-xaj.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3a18615-3db8-542d-9efc-4d79347bd98d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alimonyandspousalsupport04.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alimonyandspousalsupport04.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91ccfb68-b874-58ef-ac19-815c210bb5e6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alimonyandspousalsupportfinder.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alimonyandspousalsupportfinder.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f655277-4c9b-5a69-986b-e9d823bbd9a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alimonyandspousalsupportguide29.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alimonyandspousalsupportguide29.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c52241c-2bb8-598f-abb0-7943232b36fb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alimonyandspousalsupporthub.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alimonyandspousalsupporthub.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--198cb784-a79c-5da0-821a-33293e17d772","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alimonyandspousalsupporthub08.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alimonyandspousalsupporthub08.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b38b777d-7bbb-5893-83eb-40fa243eef01","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alimonyandspousalsupportnet25.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alimonyandspousalsupportnet25.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7e6eae5-1768-55c7-aa41-8abe02772ae1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alimonyandspousalsupportnet39.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alimonyandspousalsupportnet39.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09062096-6bda-5c8f-a298-9d3190ac5fc1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alimonyandspousalsupportonline.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alimonyandspousalsupportonline.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40c7d0dc-1c73-50ea-8923-f98751dc8a43","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alimonyandspousalsupportpro.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alimonyandspousalsupportpro.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa2f7625-d9e0-5bd5-acc0-697d3e514e24","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alinabg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alinabg.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c269722-4990-5747-81f9-3062b16c3877","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alinea-gc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alinea-gc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9268fd5a-1c70-5fdf-beb4-9ccc9584501c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alinea.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alinea.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa65f9b2-794e-5cde-bac2-2beaf6a9c1e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alineabout.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alineabout.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--236596ee-1465-59bc-ae23-f007f313842d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alineadvisors.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alineadvisors.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0a0da11-c002-56fe-86d7-666f190e1569","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alineasiatravel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alineasiatravel.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41c0a4b1-a34f-5f1d-a0e1-c38482598d1f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alineatuproposito.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alineatuproposito.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce1496b5-994e-5f62-bdb7-d44ed1f99a36","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alinequissak.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alinequissak.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--961a021b-d0c5-5255-9f2b-ed951c598b9a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alipansou.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alipansou.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27b6bc24-0ef5-5986-ba83-07a7c0aee1c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alipay-secure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alipay-secure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45c028c9-320b-53df-aefc-4776fafc7c41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alipaypal.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alipaypal.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06b9c212-3fe8-539c-993c-4d8e5452c2c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alipaypal.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alipaypal.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec5d5d88-aac8-5ed3-8ae5-10b27cc1fbff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alirezamirshojae.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alirezamirshojae.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b994286-f2f9-5629-9852-a0d25ab33b6c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alirsad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alirsad.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c2e9958-ed93-5c3a-8e65-2001625d450f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alisa54bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alisa54bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79787c3b-869a-5a60-be58-b675af1ed8ac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alisari42bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alisari42bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb255ed0-cc97-5a52-8d2e-179cee8ec005","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alisari42bonanza1.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alisari42bonanza1.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b23df6d-7854-555a-90a2-d34797969d9e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alishamattheis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alishamattheis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7410aa7d-1260-56ad-b896-ceb55890bac5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alisonheimstead.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alisonheimstead.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4234c95-4676-59e6-9131-2ec7c8cb0fe8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alisontattoo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alisontattoo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8847e3e-9ec1-5736-90ac-dfdf3cd987a3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alisonvanzandbergen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alisonvanzandbergen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--526a04df-f8ae-57d7-b904-670331976a3a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alisonverify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alisonverify.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3ab0d4d-85df-5c2a-8f01-196015ad5773","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alissa-collins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alissa-collins.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eebe89e-f2a1-5db7-a1c9-11282f34071c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alissa.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alissa.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de1a9eef-9cde-55b4-bcd3-2420b44760f4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alissacolephotography.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alissacolephotography.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8df68b03-e25f-554a-b7b4-5827ed416f25","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alissagokhstein.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alissagokhstein.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b61b4a06-21f1-51bc-8867-2c2c84bbbf32","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alissagruop.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alissagruop.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55b26b30-aba9-5dce-8483-2ad7cb31572c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alissaheapdesign.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alissaheapdesign.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--887ad4f3-174f-5a6e-87e4-b1200ab99c44","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alissajonesnelson.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alissajonesnelson.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2504d98-61c1-54b7-9b9a-c32fabb7040f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alissarnajjar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alissarnajjar.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77029907-badc-5170-b3b0-cdc1ff019b1d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alissavana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alissavana.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1737b84-d055-5c3b-8634-4de2d3391219","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alistairgroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alistairgroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f32ddfe-bf92-5b14-99b3-72f6480f4405","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alisveris-secure-odeme.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alisveris-secure-odeme.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--292fde86-ec49-5608-b02d-9efdfa659dac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alita-battle-angel.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alita-battle-angel.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4feb1880-a5ce-5e86-82c0-90c3e648147c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alitoy60gmailson.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alitoy60gmailson.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4942f5fb-72fa-5c15-9a82-f7c8564c8503","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alitrustpakistan.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alitrustpakistan.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d0cbacb-c713-593a-be8b-3798badbb21a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alitupsicologa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alitupsicologa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2845afc-bdf2-5b08-8bdd-8ad6172f593b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alivanz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alivanz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83076f8f-6e7d-5c5d-9c88-54c464dc76d3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alivelivebonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alivelivebonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72d78f27-9bfe-513f-8c86-d9c28d9ec360","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alivenessalign.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alivenessalign.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e16d6ae-5b06-5313-b5cb-6c5d1a8ba109","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliveperjuryruby.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliveperjuryruby.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bb6aaf7-5346-58c0-8cf2-d08d08f3a05d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alivssat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alivssat.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bcde285-5ec4-5d98-bcf4-02bcab7e51b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aliyuncs.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliyuncs.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a076f9aa-bc23-54ef-b731-3f7f8d98d579","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aljassarco.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aljassarco.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9493bcc4-d3b5-5935-b374-ca9a4405a22b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aljassarllc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aljassarllc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff7d8949-7f19-519a-8d2d-2f4fe2cc8fff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aljazirarepairshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aljazirarepairshop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d592b1df-09e1-5b2f-b117-8bb7403153d3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alkanzyfurniture.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alkanzyfurniture.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7221a900-ac6d-56b2-b77b-cab3f92641ef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alkattide.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alkattide.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c96bcbac-0293-5bc1-864e-1827a65087d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alkaziminternational.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alkaziminternational.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba48b937-42ae-51de-915e-7a389785a94c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alkhairtrust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alkhairtrust.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8c4fa66-3be8-5c0d-914b-968faaabe50e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alkheyraattradingcompany.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alkheyraattradingcompany.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e2230c3-042b-51ae-9381-a2c741eb5f0d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alkolikkbonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alkolikkbonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54c79450-c886-56c7-bec6-eb865ee5ada5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: all-about-renaissance-faires.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'all-about-renaissance-faires.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f83d94a4-f59d-5b41-9453-1d551a19a137","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: all-about-web3.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'all-about-web3.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa131f01-6a6a-558c-8a76-d978fd484bc7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: all-attempting.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'all-attempting.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--559ca609-e6e8-5f3f-8d0f-b9785d38f82d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: all-in-one-dental-practice-management-suite-hrx.bar","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'all-in-one-dental-practice-management-suite-hrx.bar']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--101b5b39-41b0-5f59-8d88-cf66357dd5e6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: all-solid-state-battery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'all-solid-state-battery.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0404fe6-a50e-5c92-994d-8ff5f1d38344","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: all4massage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'all4massage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--438a28f1-751d-5447-aedd-e2d4bd01ca50","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: all4tech.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'all4tech.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f96147e1-da4d-535b-aede-274f200d5b2b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allaboutastronauts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allaboutastronauts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f93cb03e-00a0-51b2-b953-d4421e315be6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allaboutcryptoexchanges.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allaboutcryptoexchanges.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63cbb1fd-da61-5998-9849-5c7fd68be41d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allaboutlectronic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allaboutlectronic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--305f8000-d859-5adc-80d2-2fa4ead76cc8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allairdrop.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allairdrop.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e521f111-9120-5c62-82a8-14f8b882310b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allanzafinanciera.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allanzafinanciera.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfef898e-093b-53b2-b4c9-67ad0150f634","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allanzlife.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allanzlife.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--469381d9-47eb-5b3e-b10a-3b3c6c39a0fb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allanzufall.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allanzufall.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63199986-76dc-5875-ae54-3a3dba125cc4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allassam01tamb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allassam01tamb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aba1c0b-40a1-56b1-b99e-ad0893db4b71","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allayravage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allayravage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08828713-f46d-59d3-80d2-8e8530593b4e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allaytrustunion.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allaytrustunion.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aade5347-b903-56dd-b5e8-12f83a68106d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allaywanladiessalon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allaywanladiessalon.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fd4e2fd-52bb-50c4-9cb0-a5da52754a3f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allbasecruises.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allbasecruises.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ece90dc6-1e1e-52b8-8c08-0b44a718a0f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allbasedomains.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allbasedomains.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9af9dbf-f42c-5933-90a5-62b921c3fc66","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allbaseelectronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allbaseelectronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fde7a29-3900-586b-a1d4-afe394441f12","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allbaseemployment.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allbaseemployment.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a32b6c3-6f8f-582a-b8fd-631222190892","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allbasejobs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allbasejobs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d9b3924-bf93-5983-bb66-922064747ce6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allbaseplumbing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allbaseplumbing.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60f86969-308b-5af2-acce-797dd9c3d003","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allbasesecurity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allbasesecurity.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3460f6d9-3818-5b03-8dc4-bd2aca18cfda","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allbasetech.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allbasetech.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e8411df-4489-5d5b-b85a-29c246810ed9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allbasetechno.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allbasetechno.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--508b7a53-feb7-534b-ac12-0458077d3cff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allbasetechnologies.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allbasetechnologies.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10e50673-bcc0-5f6d-b11e-4b69fc22fc58","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allbasetechnology.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allbasetechnology.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3ee207f-713d-5898-99e8-afe60b203e0c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allbeactive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allbeactive.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0a731dc-0a77-54cd-ac20-017bc1070cb4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allbio.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allbio.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8d9feab-2c46-5590-86dd-fc45ae1ccc97","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allbitcoincasinos.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allbitcoincasinos.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16dba0ec-08b7-59e1-b9e2-e9e7e8940360","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allbitcoinprivatekeys.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allbitcoinprivatekeys.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdd277e4-800a-5517-8606-0ad13a50a177","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allblackvotesmatter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allblackvotesmatter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a84bac1-83a7-512a-bb53-2b3e5359deba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allbridge.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allbridge.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9524b20-8f52-5dd2-bd58-52bf052a1690","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allbridge.support","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allbridge.support']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c2c6dcc-e3e5-5343-b50a-c057fa1e64e2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allbridge.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allbridge.trade']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--252776cd-9ef9-5437-a925-b6ae7023de4e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allbusinessarticles.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allbusinessarticles.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--864defbe-7d7f-53cb-bd6a-33533f2fd0ef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allbuysport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allbuysport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cf96089-1628-5f8c-bfc5-52ac19fc3c25","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allcallsmatter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allcallsmatter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75b70e8b-5bd8-5b68-aa6d-f8a6e310eae9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allcannabisstore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allcannabisstore.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd6c1cb8-d41c-5e88-bf3c-9eff301acb63","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allchinabuy.bar","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allchinabuy.bar']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e5dc1fb-b38d-57d7-811e-d2f35259497e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allchinabuy.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allchinabuy.biz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bab8018e-4485-5b44-a2ba-85ececda70f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allchinabuy.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allchinabuy.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be4ad2ba-c44b-5858-9e09-e7e1e863fd26","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allchinabuy.center","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allchinabuy.center']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09b5eab1-eb9a-503b-9762-ce1af0d95a5a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allchinabuy.fans","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allchinabuy.fans']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4b3aba1-12dd-560c-9298-2d618a8af838","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allchinabuy.homes","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allchinabuy.homes']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99e491ec-721e-5b93-8351-e889d400dd1e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allchinabuy.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allchinabuy.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20414629-104b-5b40-bfba-91c775798111","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allchinabuy.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allchinabuy.one']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9380e3d4-fd08-594b-99a2-e4fb87073e5f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allchinabuy.onl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allchinabuy.onl']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--561cd0b5-b1d6-52e5-ad7b-000ce29ad569","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allchinabuy.quest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allchinabuy.quest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96ab8563-1c73-56d8-b40b-de66ade0a298","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allchinabuysheets2024.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allchinabuysheets2024.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64bd65cc-c38d-51ca-ba06-19ebfd417129","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allcitizenscharteredfinancial.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allcitizenscharteredfinancial.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05bbe501-6074-5482-ad8d-04420f19a766","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allcitizensfinancialcoperation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allcitizensfinancialcoperation.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c9d66df-87fc-5315-b6d6-88a0ee000b39","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allclaim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allclaim.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6d51fa9-31b0-58d9-b293-cb633d8e9cc5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allcryptocasinos.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allcryptocasinos.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b987c77b-838a-589a-bc9f-0decdde61550","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allcryptocourses.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allcryptocourses.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50e05afa-266e-5732-b6e4-00f963e59f01","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allcryptomadeez.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allcryptomadeez.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91de8366-9b2c-5033-a15b-39ec34243815","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allcryptomadeez.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allcryptomadeez.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68ce417b-490e-5e3d-8d9f-09aee4390e3b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allcryptonews.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allcryptonews.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b7d769a-9968-5c4f-9214-a9c230bcc06f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allcryptopay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allcryptopay.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d37f268-4c50-55e7-97a6-7a03afc92a63","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alldailyupdates.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alldailyupdates.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--239c349e-75cf-5c44-979e-3f9689015aa9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alldatabridge.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alldatabridge.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e34a9111-4b46-5047-8224-de9cf915e30b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alldayboardupservice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alldayboardupservice.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1016610-7d28-5725-965d-b5a6699fae81","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alldayvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alldayvault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1efd5968-d4f6-51a1-b963-e35a3481e4aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alldigitallyforever.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alldigitallyforever.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acb67177-cf7a-543d-adcc-dc066bcb6a78","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alleanza-monarchica.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alleanza-monarchica.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40720761-a2dc-5409-8f38-09e6b23eb0cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allediscovery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allediscovery.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b801dec4-2846-50fe-81c8-0d54806404ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allegationsurgeryblotch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allegationsurgeryblotch.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af49b69c-40e7-56a7-b6f2-07ecf706f148","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allego-stronatransferu.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allego-stronatransferu.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbda04c9-54c3-5249-8b57-352db7de8dd8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allenbases.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allenbases.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--153c7e51-8c59-590a-95c0-58e2dc6ad567","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allendaleelectronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allendaleelectronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6899c69-67da-50f9-a97f-de0050b7b4f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allendaleelectronics.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allendaleelectronics.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ebb9ea5-5539-5fb7-9aee-8ba9cd70089c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allenfinanz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allenfinanz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--625c3bad-11c4-5042-9766-c29a92631c23","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allengoogle.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allengoogle.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8e52651-4b84-5cc9-9912-ed0e207352ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allenprepareattic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allenprepareattic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a19835c-a383-57e0-9d83-7fc3a1368886","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allenselectronic.repair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allenselectronic.repair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afc002cb-26ef-5671-80fc-beca88c8d81a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allentowncannabiscompany.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allentowncannabiscompany.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bf8c361-e555-505a-8a0a-c659c8ee8829","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allentrust.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allentrust.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9496e37-6705-547d-8d97-efb32be78dcb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allentrusts.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allentrusts.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14cd4c44-c931-5605-99fa-b6ceee244d73","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allergyally.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allergyally.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6987c15e-eac7-541a-b27e-c2fb3cee6ec1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allergyally.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allergyally.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06a74145-3617-5ea5-a32b-0dfd230fb148","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allergyclaim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allergyclaim.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3de2979-7171-5b77-9f25-1c4e72a6ba9c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alleyseatlenssatellite.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alleyseatlenssatellite.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a2d7c02-7937-52b6-bda1-644839c3a8e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alleytrustcapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alleytrustcapital.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3baa9ca2-0dd8-5872-82f7-3dd20ae42e2d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allfarmmag.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allfarmmag.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439ad8ea-1670-566b-8b25-d86fcc157821","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allfinanz.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allfinanz.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ce8c5e9-d506-56b1-a8b4-afea1efa2a92","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allfinanzen.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allfinanzen.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14083d39-5601-5588-b312-90764f029741","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allfirstpage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allfirstpage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cd71c72-2734-5340-b3d3-cf1e5055ba5f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allforcash.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allforcash.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe14f9ca-4d4d-530f-ae8e-8361e858c8fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allforexbrokers.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allforexbrokers.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f593199a-c5d2-53aa-af41-dc51155ea5f4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allforexindicators.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allforexindicators.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e565633e-a6e7-5eaa-9f40-d732a89090ef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allforexpropfirms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allforexpropfirms.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--357ab4c4-0d2b-5064-80d9-8e6c0260230f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allforexrobots.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allforexrobots.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c811b572-9a1e-52cb-8c07-671cb62279fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allforpadelargentina.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allforpadelargentina.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--092793d2-0bca-534d-84e5-252a99734ca1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allfreecrochetpatterns.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allfreecrochetpatterns.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--facca8f5-4ff6-5cb9-a955-0ea694eca1bc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allfunable.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allfunable.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25ae1e77-0a58-5612-8f46-1f7dd03b592d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allgamesinone.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allgamesinone.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ff42aac-308a-50f5-8f99-c692b152f14e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allgenderattire.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allgenderattire.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9611b2ea-df48-5cff-adb8-58a86cad4bbe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allgifts.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allgifts.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--209e9be7-819b-5f43-9a64-8c7dd89d21dc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allgirlmassage.mobi","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allgirlmassage.mobi']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33e42c10-cfd2-591f-9b15-ce163e0fb21d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allgirlmassage.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allgirlmassage.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62a10de5-cd07-5f72-95a3-0cf833cf7a51","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allgoodsetups.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allgoodsetups.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e38d74d-7fb2-5001-bc87-1b712f045b46","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allgreattrips.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allgreattrips.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce96d3b-899f-5932-ab03-6f6bfa39fa9f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allhomerepairsnj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allhomerepairsnj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fd3c273-062b-53a9-a148-53504ce9198c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alli-ai.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alli-ai.network']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5a106a6-4d33-5827-a543-e6af37cff93f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alli-create.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alli-create.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0d144d-12a9-5ddb-9454-4f7b80bf5baa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alli-edit.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alli-edit.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab48a70-bb8f-50eb-808a-101f7e03292e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alli.vision","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alli.vision']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4caec1ba-2b3f-52e7-925d-ad972e7e9b9d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliai.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliai.digital']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--093a34a9-7d4c-5ef2-8423-b2167a870e9b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianceattire.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianceattire.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edaa20e5-449b-5f7b-8502-daf04e900cc7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliancebridge.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliancebridge.biz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d215e4-7831-5062-87c9-03127b1be163","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliancecredittrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliancecredittrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c447b5d-d219-572d-a27d-2e891c0dd9c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliancegoldsvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliancegoldsvault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0d5f12f-41af-5370-b7f6-4edd48cb449b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliancehaventrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliancehaventrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca627e36-ec01-5c14-a6cc-339c1e50f349","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliancenovatrust.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliancenovatrust.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7597a0d8-540d-5d43-b67e-9d365c43d9e2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliancepetrolueminterests.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliancepetrolueminterests.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9a4fc0f-4e6a-5d0d-b230-63bb091172b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliances-suites.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliances-suites.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--978796ad-ddb1-53bb-8112-07d0bceb6e3e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliancesgroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliancesgroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ab5941b-a421-5051-9a1a-7aa39f980278","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliancessuites.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliancessuites.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a79893d-b231-559b-ab43-c9894f50c15f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliancetransfersolutions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliancetransfersolutions.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30cb9e8b-a911-5029-821f-5cddf9c0dc65","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliancetrustbns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliancetrustbns.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4e62c22-68c6-5d10-93a4-c791620cb644","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliancetrustg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliancetrustg.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffb797be-7785-53df-998b-e483cc091758","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliancetrustsbn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliancetrustsbn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f35e794-cdab-5817-8dc1-92e74b7fd475","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliantenergycommunitybattery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliantenergycommunitybattery.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c80b2c7-3bf1-51d7-92d9-4a4359eca524","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliantenergycommunitybattery.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliantenergycommunitybattery.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83816c0e-2ad7-5a2a-bca5-c4d9542e08ec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliantenergycommunitybattery.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliantenergycommunitybattery.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff1e31f9-0b30-5946-9ced-b21e2ac558d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliantenergycommunitybattery.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliantenergycommunitybattery.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5e7f698-f73a-56b3-86be-bdf0d823e6b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianttrustonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianttrustonline.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b3dbc50-6048-54f8-8906-c7b9766104e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianz-bg-vqjpl.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianz-bg-vqjpl.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2de945d-d973-51bd-8f3c-690751a40d81","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianz-digital.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianz-digital.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b977e655-23ec-5aad-84fc-fb7416c97a9a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianz-gestionpatrimoine.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianz-gestionpatrimoine.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dfe316f-4324-587e-9f5e-79a14e6b3863","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianz-global-assistance.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianz-global-assistance.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ff2b137-91d8-5d7d-87fb-be19cf9a0c17","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianz-gp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianz-gp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17c0a60a-79b5-5825-969d-529251f51bfc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianz-iard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianz-iard.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cc71898-dfc4-567d-8448-4ba18844cb9f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianz-iard.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianz-iard.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f22005c6-78f6-5223-a48d-70000c53dfed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianz-insurance.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianz-insurance.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f387786b-080f-551b-9921-5b8231bb7030","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianz-jorgebenjor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianz-jorgebenjor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae7bb58f-185d-5580-a106-4773921b45bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianz-patrimoine.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianz-patrimoine.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c826936-f046-5ce1-9ebd-c29f474be25b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianz-pc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianz-pc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08bc10a4-a3a8-5786-b0b7-9963073c054e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianz-service.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianz-service.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a72d6198-a53b-5d36-9d6c-d33d675d0521","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianz-travel-insurance.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianz-travel-insurance.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--776e97f3-2c69-5d18-956c-68258e9518da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianz-travel-insurance.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianz-travel-insurance.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2e8a8d4-f513-59b5-abf9-a8cf39a6105c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianz360.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianz360.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4786690f-a736-5fc0-aa81-d8471630edb9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianz360.homes","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianz360.homes']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a60b4980-df04-5c37-9b72-de2397592a45","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianz360.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianz360.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3eb60a5-89f7-5c5b-84a1-b4679e583ef2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianzbetcasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianzbetcasino.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab9d1436-d8dd-5b34-9abe-b096320af99a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianzconseil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianzconseil.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c98d04c8-a336-56cd-9918-fcc40f11c6f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianze.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianze.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d0df411-6a67-5594-a326-d2bb28474395","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianzeshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianzeshop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea649013-8ced-5086-9448-5078ea65778c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianzfortrading.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianzfortrading.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15c2484a-0742-5076-9a83-a3a11f422136","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianzfreights.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianzfreights.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f81c7cb-d7cd-5a82-b036-976abb493e0f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianzgestion.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianzgestion.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cf2fd6c-92cb-54e4-b43f-3a9c06ab4c7c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianzgi.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianzgi.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b2f8413-c237-5d44-b5b8-f57f3f99f01d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianzglobalinvestors.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianzglobalinvestors.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d7bbe61-50d1-50b4-9ae7-859ca1bdd037","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianzglobalinvestors.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianzglobalinvestors.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4569122-bbd3-528f-b47c-61b71f128193","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianzglobalinvestors.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianzglobalinvestors.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cace97f-cc0b-5bb2-b819-29a6198489a9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianzglobalinvestors.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianzglobalinvestors.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca1eb260-b853-5c13-979d-071d8d31aae5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianzgroupboardinvitation.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianzgroupboardinvitation.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--580d3536-a7bd-5bcc-8255-8c74afec986e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianzgroupboardinvitation.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianzgroupboardinvitation.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cfd2143-88d7-53c9-89c4-a67f2369624a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianzgroupboardinvitation.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianzgroupboardinvitation.wiki']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b08e52ff-f95a-5c8f-8570-4be4e6c788e6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianzgroupboardmember.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianzgroupboardmember.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ef20cfe-03d5-53ed-ab4b-fa9d13763ac6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianzgroupboardmember.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianzgroupboardmember.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e28db027-665e-511c-a080-5aab0c59d915","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianzinsurance.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianzinsurance.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08eeef9c-b064-52df-8761-1f79c08bd9f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianzpatrimoine.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianzpatrimoine.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45e6f22a-55e9-5514-ab40-f66624f742b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianzplc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianzplc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea090d9a-9225-5d40-ae01-b78feb7672a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianzseguros.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianzseguros.digital']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d563b2d6-6e28-572f-aa53-cee23d49f105","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianztravelindurance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianztravelindurance.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f029b42d-43af-54ab-94ac-9c9e07a0d056","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianztravelunsurance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianztravelunsurance.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--205bb2b7-2110-5b4b-b41a-afac00b0dca3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allianztravleinsurance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allianztravleinsurance.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4d4ea1b-8c8a-58df-b166-8a7199e6e642","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allidoislisten.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allidoislisten.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b07ef7f8-749a-55da-bb3b-18aa78b0e8f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliedarts-seattle.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliedarts-seattle.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07b74446-984b-576b-8ebe-46ea050c9961","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliedcitytrustbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliedcitytrustbank.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ce92b0-681c-528e-a8bb-83e01e62c552","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliedcryptos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliedcryptos.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4aaf106-e350-53a0-8991-d97c269a39f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliedelectronic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliedelectronic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b06f5287-3295-53aa-979a-2e10c2e13689","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliedfintrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliedfintrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a975b2d-eb4c-586b-a610-28beca5d40eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliedglobaltrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliedglobaltrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5956a4c8-bffb-5b3b-abd9-203115a0e8c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliefamilyfarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliefamilyfarm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed80c6cc-1e54-54e5-94f7-2acd8caebb69","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allihossack.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allihossack.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d701f4b2-35e8-574d-996d-4dccc3fcc641","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliknowledgebase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliknowledgebase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62608705-4f5a-50b9-911c-270b61a68a99","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allin1infiniterewardexpedition.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allin1infiniterewardexpedition.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8283b462-d68f-50ca-bc26-8212d4bb30f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allin1megagiftkingdomvoyage.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allin1megagiftkingdomvoyage.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22d67770-5ca0-53d6-a611-440bc6fc334c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allin1winvault.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allin1winvault.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b05cf128-69a2-5ba3-94e6-9d0c805ecd66","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allin1winvault.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allin1winvault.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e86779ed-0e05-52d9-bd87-574088f7fc89","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allin1winvault.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allin1winvault.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8aa3809-9a71-55a9-b20d-e3d706577b05","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allin1winvault.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allin1winvault.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6362b28b-a7db-5748-8c89-ea7c3fb61d58","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allincrypto.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allincrypto.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a79ea254-8308-546b-9aa6-aa3a64b80777","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allincrypto.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allincrypto.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c32e8cb-08cb-537b-bdcf-795e15540eab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allincups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allincups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1d08833-f4cc-54e6-b35f-baa0e53a6f0b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allindiattdaryavysyasatramtirupati.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allindiattdaryavysyasatramtirupati.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30a0f3ef-5f14-5101-b495-18e29c78f26b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinforcats.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinforcats.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29b0d43f-6ab9-5ea4-ac60-d01159c6f81d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinfosecurebcb.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinfosecurebcb.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6ce08e5-4e97-5e2b-a4f0-44b525e3679c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinonegiftsarenaboutique.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinonegiftsarenaboutique.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--354aa90c-8d0f-5a04-a356-db1207d1b5a6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinonegiftsarenaboutique.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinonegiftsarenaboutique.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6cb40fe-ccae-5333-b3e2-ed0b694df816","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinonegiftsarenaboutique.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinonegiftsarenaboutique.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbc5145a-8903-5907-b1e6-f112a82b8105","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinoneinfiniterewardexpeditions.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinoneinfiniterewardexpeditions.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ade5c5e-ddbc-53a3-9ca5-a4ad9116cc28","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinonemegagiftkingdomvoyageclub.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinonemegagiftkingdomvoyageclub.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3972a9e-0fe1-5b53-8256-73c951e0b5fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinonemegarewardssanctuary.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinonemegarewardssanctuary.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2c3b1af-aa00-53c8-b95a-4544937508f4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinonemegarewardssanctuary.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinonemegarewardssanctuary.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1255c065-578d-5ff1-86e2-ca5bb62ebc02","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinonemegarewardssanctuary.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinonemegarewardssanctuary.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23323c36-31b9-5d53-a8b7-1e8a7e35cfe3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinonemegarewardssanctuary.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinonemegarewardssanctuary.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebdd05f0-907c-542e-8671-5888fa2a99eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinonewinsvault.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinonewinsvault.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65593be4-e89a-59c2-9b78-863d94ca8f50","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinonewinsvault.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinonewinsvault.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c27f2fe3-565b-5e78-95e3-d3bfaae25ab4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinonewinsvault.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinonewinsvault.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b37b50eb-404f-5949-81dc-19b7b1f1476d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinonewinvaultapp.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinonewinvaultapp.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e10826a-a4d0-5114-b3ec-c6280a42c8c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinonewinvaultapp.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinonewinvaultapp.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626a3e8c-d6fe-591b-8304-968080c32ab9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinonewinvaults.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinonewinvaults.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--079caa7c-8e1a-5cc1-aa68-30d6c11375b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinonewinvaults.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinonewinvaults.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b8f1572-1160-5d89-a6bc-0e416396e63d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinonewinvaults.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinonewinvaults.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43fbae3b-2554-5aa5-adf5-a939655b2cf7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinonewinvaults.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinonewinvaults.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e177faff-3878-5dd8-947b-26328d69bdf0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinonewonvault.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinonewonvault.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97943e51-987a-541c-90bc-3bbedebbaa1b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinonewonvault.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinonewonvault.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--359efc20-7ead-5c62-bccf-befeb47fee0b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allinqfstrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinqfstrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9b0abf8-5307-55a6-af21-c98e2792e87a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allipaysecured.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allipaysecured.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2579dac4-bfb0-5ec5-a25c-f6c566a5c8ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alliwise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alliwise.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd55ccc4-318f-5169-9dfb-577f90e62643","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alllanceltrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alllanceltrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50260349-f2b9-55a6-b469-728558a0030b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allledgernow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allledgernow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4027c861-e305-5d5a-b0de-18613e9013df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alllivesmatter.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alllivesmatter.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03440110-9216-5ea4-a2a8-7d7d21517ec2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alllivesmattertoo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alllivesmattertoo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41b3c534-4610-57fb-b5a0-91ca194274b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alllivesmattertoo.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alllivesmattertoo.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0989bd27-e36c-5182-b604-bd35919e8d0c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allmannabb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allmannabb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f15503e5-1be7-54c3-b508-5b36de6f99d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allmaxfinanz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allmaxfinanz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64edc00c-9428-5d03-a394-16474c745e53","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allmaxfinanzen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allmaxfinanzen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7193323-20e2-554a-a1b8-ad0b84a5ea9c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allmeghalayahousiegroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allmeghalayahousiegroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b0a6a36-6414-5ae4-8824-7215598c137e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allmintcollection.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allmintcollection.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b95730c-8aed-530f-93f6-29b5f41811c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allmobiledatabase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allmobiledatabase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9dc5bbb-1575-5153-a84b-634c1886447b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allnabung77.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allnabung77.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b308f4a-ea8f-5f0c-8b64-1fe725c89664","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allnabusiness.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allnabusiness.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3b09728-4e79-5435-a2cc-b6fee182d0bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allnewmessages.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allnewmessages.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--134b0249-631b-5c3e-b290-4766121f587f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allnewsupdates.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allnewsupdates.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36914348-c1c6-5cb7-bbf5-cc5b82e65538","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allnonsenseissacred.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allnonsenseissacred.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57b403f3-902b-52c1-8bfd-9e3a923a06b8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allnovelupdates.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allnovelupdates.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d421f85b-6f64-5097-9e24-a4ebd228f26c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allo-claims.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allo-claims.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0868553d-988b-5c3f-abea-abf2577d245a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocate-basegod.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocate-basegod.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a34b2c2-1f2f-5c8a-bba9-f1b09f82e122","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocate-pendle.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocate-pendle.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--741593a7-1381-54c4-82d5-4e8a1e6ed52d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-apu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-apu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d63b134-5da2-5c9d-b922-65e2ef7aeb15","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-arbitrum.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-arbitrum.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6f568d0-0fe9-5c19-80ae-1e1be1b90cb8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-arkham.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-arkham.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65994a42-f492-51c6-af04-4436815184d2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-asterdex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-asterdex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31cc8c57-c8ef-5f38-b517-e16684aaafbd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-b.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-b.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddfc6fa1-79d9-5b54-9780-315fbc8f707e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-babydoge.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-babydoge.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dab67399-b109-54b4-9057-e42c845f1197","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-babydogepaws.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-babydogepaws.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f123efb3-6c39-535a-8207-0f3f700234c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-block.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-block.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0211616a-4c83-532e-907c-79010b885087","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-blocksmithlabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-blocksmithlabs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24ba0b05-4ef9-582f-b652-612c61f5afac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-broccoli.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-broccoli.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5cab67d-45c1-5f2c-906a-0a09638bfb24","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-catbonk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-catbonk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84a34d0e-6d53-5bda-b7d9-e40416a20723","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-catbonk.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-catbonk.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39e9f660-4e6a-5cdf-9cad-4f3c1986ce8c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-cope.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-cope.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--711434e1-0783-5877-a552-cf16d6a77a03","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-dege.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-dege.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbc5d3c0-cc92-5ae7-8562-55d4a9879ada","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-dege.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-dege.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef736199-e51b-5980-84d5-55f26e29bb10","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-dege.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-dege.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ed9d0ac-8bb7-5dae-be75-762e74e0b39e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-ice.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-ice.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01a88676-3926-5c12-bdbc-ecf6fa261509","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-iceblockchain.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-iceblockchain.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81b3b29d-8237-5f28-80c0-f63e86739589","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-icecoin.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-icecoin.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a202bea-92f2-50e5-b523-d72b8e72f06e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-icetoken.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-icetoken.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14bc0a66-2d62-584c-a77d-dac617c742c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-kai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-kai.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c98fb82-d7bc-5a4a-9eb4-b23177bbc433","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-keeta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-keeta.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88397450-8a06-5d39-90fe-c0f027b1f5ef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-kelp.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-kelp.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--524a5c32-491b-54f4-afba-edf1eab6ac77","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-manyushiba.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-manyushiba.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6679b280-762b-5b4e-810e-35e171423a23","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-mubarak.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-mubarak.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56e9ea04-85b5-50d3-bc7b-8b0a6841ee48","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-paws.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-paws.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a945a21-cf32-5129-9dda-700b21393b2e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-pengutoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-pengutoken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b0f4e1c-0f59-532c-84cf-466e663de842","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-pepecoins.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-pepecoins.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8285f0bb-0709-585b-bdf2-5232de11890c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-poop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-poop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9151c5f2-016e-5a03-8c17-0eed948644ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-screll.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-screll.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a643093c-8ba1-558b-838c-6fb6b4e3e656","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-scrollio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-scrollio.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b724a4ba-dbb9-59e0-bbd0-c0d7171175c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-sei.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-sei.network']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3a11b02-14d7-57fd-a829-c3e014e3e1e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-shib.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-shib.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--961cd721-6c2e-5da0-a441-dfec9c5b1b84","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-shiba.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-shiba.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--587546b4-90a8-5ec3-971c-68f4160d3c89","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-shibatoken.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-shibatoken.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8815438-1c47-5f4c-ac91-61f30d4279e6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-shibtoken.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-shibtoken.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8398b0ed-6945-5110-9a7d-2cbe332dc484","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-simons.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-simons.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fec0241-699b-5353-a99f-5b62b2945c4d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-sophon.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-sophon.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e38cdb9c-7a6f-569b-b847-b79c65d01a0d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-spx6900.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-spx6900.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db3c3f1a-b9bd-5ad9-9fd8-6c54468e873d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suilend.art","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suilend.art']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4558a51-845c-597f-95ab-73b42f7ce5a1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suilend.best","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suilend.best']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac40a382-1039-5c6f-ac2c-4381819c15f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suilend.bond","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suilend.bond']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6223568-2f34-56b7-b75b-17281ea587eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suilend.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suilend.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0423268c-8ce2-55dd-8282-464ca58ebe45","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suilend.casa","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suilend.casa']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34660733-a880-50bb-b968-017a61716bfe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suilend.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suilend.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3689907b-2004-5cfa-aad2-a78e43ba3680","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suilend.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suilend.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26b9d554-f2c4-542b-b7ae-e9616167c919","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suilend.fit","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suilend.fit']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--727fa1f1-9510-568c-9826-54fd0b22e65f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suilend.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suilend.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdf4b15b-41e5-565b-8e5f-6f5f82785157","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suilend.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suilend.ink']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f987cadf-ad02-5aba-92d0-f791b3cf3129","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suilend.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suilend.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07620354-e98b-5791-8919-673b57563ae3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suilend.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suilend.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92c0d36c-6dbf-516a-8b51-e7a5952cfb65","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suilend.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suilend.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22537911-8d60-55d9-9a70-2e5144864d1a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suilend.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suilend.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a72b1a10-1d8c-52ff-9a65-a29f19cb306f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suilend.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suilend.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75c9fdb8-b1c2-59e9-9937-ec78ddb929dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suilend.qpon","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suilend.qpon']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bc2c52c-793d-5b26-88d3-a82db6e20daa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suilend.quest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suilend.quest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5879cc8e-8189-5e45-900d-3a47352e12d0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suilend.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suilend.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6355397-dd09-5dc4-876a-f1937a2096b8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suilend.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suilend.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a459cb6-3dc7-5b53-b275-d182dc341f93","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suilend.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suilend.wiki']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d99ceaa-6654-5594-9f8e-396b1165fd1f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suliend.best","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suliend.best']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56378ba2-38f8-5188-81df-3423195432e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suliend.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suliend.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54a02e61-ad7e-5bce-a8b0-445f6a07ac3a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suliend.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suliend.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7cbb449-e196-532d-b932-1783988d13d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suliend.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suliend.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32e45464-3c9d-54ff-892b-a2f3ddf821d0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suliend.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suliend.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b8af55-0d26-5621-9c92-4e2a682bd30a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suliend.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suliend.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfcc5fb4-8599-5d59-8151-7794fb202f41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suliend.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suliend.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f578165b-0d6b-5630-a148-c3f18dd9385a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suliend.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suliend.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bdda1a8-84e2-595b-a43c-18023cbe1d22","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suliend.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suliend.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--407b734f-ddb3-596e-b06b-fb7aaee8c594","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suliend.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suliend.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--528f7ec1-a4a5-54c0-8dbc-0a7be6509eed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suliend.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suliend.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8b08df1-f700-55de-aaca-145e225ab014","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-suliend.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-suliend.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b3f94d6-6080-5f30-b55a-b59f3d0b232f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-useless.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-useless.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2382f9e3-990e-5b73-842b-5fe04d11a815","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-usual.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-usual.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99bc6c6e-4366-5c24-b14b-9de775cc57e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocation-usual.money","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-usual.money']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f24b1c6d-549a-5567-8bf3-96c72a8e16f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocationkamino.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocationkamino.finance']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b07276e-d7ab-5c66-816d-80e6fe4cd42a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-aethir.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-aethir.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8655345-8796-5be2-a2d8-a2b72264bb10","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-aethircloud.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-aethircloud.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90218477-40b2-5301-af35-bff57cfd3602","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-aethirclouds.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-aethirclouds.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--314a2b9d-5de2-5a0f-8d48-884f2af734d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-aethirscloud.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-aethirscloud.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de8954b8-4dd5-5608-aaf9-8441935f6637","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-arbitrum.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-arbitrum.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--868b7380-b136-57aa-9a80-9a1ec09b768c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-arkm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-arkm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f965ed25-4c4a-540d-ad60-0c19ae8f28c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-babydoge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-babydoge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a21a7da-784b-5691-b833-af00ede9827e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-babydoge.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-babydoge.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e0ffb9b-0459-579b-b416-5f2def3aa72c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-babydogepaws.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-babydogepaws.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8811971a-21cd-5fd6-a7b5-39e72551f08d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-babydogerewards.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-babydogerewards.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcb2dc71-241c-5071-a460-aac6bb8f6162","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-bckrcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-bckrcoin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79a8d13f-fce7-52af-acd4-00312fb6e7f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-block.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-block.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84cb0be4-3c27-5026-a8b3-e3d9c4025033","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-etherfi.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-etherfi.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--669fca4c-faeb-57f9-a74c-5a3fc92dff49","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-ice.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-ice.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beaa0d05-9ee2-58e8-982b-2d76eb9fcaf1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-icenetwork.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-icenetwork.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17543ec2-da90-5486-9b7b-5526a2c35955","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-icetoken.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-icetoken.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3212a623-da40-53af-9070-6d48c385426b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-icetokens.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-icetokens.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce47d880-b7c2-5380-9bf9-3b9339a3a92c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-paws.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-paws.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d11388a-acd5-541f-b671-e03fababceac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-pufferfi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-pufferfi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd9762e7-4c16-5c06-baf8-7cc23ea4e7ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-shib.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-shib.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3d9555a-f681-56e4-bc54-d9244699111d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-shiba.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-shiba.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12a680f2-8cd2-5fa9-ad5e-6c758affa75b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-shibatoken.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-shibatoken.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--355e39a7-5f47-53e2-8299-4b21fb7310e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-shibtoken.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-shibtoken.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa48e52b-2980-545d-a5d2-f27b71670ee0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocations-soniclabs.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-soniclabs.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d794f4a-a8b0-5785-a020-3d1d97ebb4d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocationuniverselle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocationuniverselle.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0154347-d720-5d6b-bcf2-49a05c44ac73","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocationz.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocationz.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--173db809-61ce-5468-8fd6-8284d445f5bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocatlon-suilend.bond","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocatlon-suilend.bond']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aafae0cd-8996-5338-b2a7-7679cbe5bd2d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocatlon-suilend.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocatlon-suilend.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--363439c4-8791-536f-bb7f-c702dbcaf13e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocatlon-suilend.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocatlon-suilend.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4a40eee-8784-530c-93a4-95814bc220cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocatlon-suilend.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocatlon-suilend.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9923c141-ce77-5849-97ae-5ffbedc71e65","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocatlon-suilend.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocatlon-suilend.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79a5e763-2d74-5607-8fb4-492d0a66e860","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocatlon-suilend.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocatlon-suilend.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9805e49b-388a-5638-8f93-7131aa7fbc6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocatlon-suilend.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocatlon-suilend.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dec378c-615a-5904-9886-59094f89b36e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocatlon-suilend.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocatlon-suilend.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff8ced5e-d1b5-5438-8b32-82dcb5199b40","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocatlon-suilend.quest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocatlon-suilend.quest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e95eac44-4664-519c-989d-e76aa7c6a054","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allocatlon-suilend.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocatlon-suilend.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca4c7755-ec90-5c3a-828c-29c17993d0a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allofthefirstsight.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allofthefirstsight.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ba94dbe-4dd1-5017-b483-432dc7672d37","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allorwa-claims.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allorwa-claims.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37095cf6-e2bf-5828-8ec2-a271c753f1c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allow-netflix.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allow-netflix.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c9e217a-b851-58ff-96e3-096e33de032a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allowformally.website","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allowformally.website']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32854f51-71d0-59bf-9888-d5823e263922","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allowhedgingforexbrokers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allowhedgingforexbrokers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b3165a8-822e-5975-b144-65455fa16106","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alloygroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alloygroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8a22810-294e-52cb-9d69-1bf95912c892","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alloywheelrepairsnottingham.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alloywheelrepairsnottingham.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5681dea-242d-5327-ab66-ba6c8a9e5bd3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allpcworld.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allpcworld.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87f5c8ad-d012-5fe1-8481-5487f50c4a7c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allpetstore.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allpetstore.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--966342e6-aa43-5b72-815d-004802af118a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allprizesvaultclub.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allprizesvaultclub.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea6e347-071f-5b14-9a10-ccc96abb1b4e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allprizesvaultzone.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allprizesvaultzone.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62838d75-0258-5b19-b4e5-49e70bfd7263","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allproofbasements.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allproofbasements.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f98c4b4d-81f0-5aae-9d46-500aa44f6a02","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allrealestatematters.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allrealestatematters.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f5d8473-c582-5af6-8fbd-598762e61d84","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allroundmedicare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allroundmedicare.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d09114ea-c426-5898-ba0c-b93e4121937e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allrpcswalletc0nn0de.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allrpcswalletc0nn0de.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba97d1dd-d1a5-50d3-9167-de905bf62fd7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allrunbattery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allrunbattery.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f55b3d5e-62db-53e0-8db1-ca2980ab2f66","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allsecurehosting.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allsecurehosting.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10c97c6a-5119-59ca-b90a-78306d43c467","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allsecureroutes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allsecureroutes.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--242e6efb-6a8a-5647-8c32-e254d7aff1d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allsecureroutes.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allsecureroutes.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d88aecb1-8e37-5df8-b777-ab4aea5d8804","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allservicework.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allservicework.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dda5aac3-d17f-5c78-80cf-a0ffcac0d376","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allshorthairstyles.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allshorthairstyles.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--774ab906-bf62-572b-aa89-b7b0c1772830","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allsimbaseball.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allsimbaseball.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdd91e67-fd62-5139-a651-2f0f0eb8ea7b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allsimbaseball1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allsimbaseball1.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b2bef24-5a24-5208-bfc9-300a3027945f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allsportsoffice365.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allsportsoffice365.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32f32029-2003-52af-824b-4c327a807426","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allssachris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allssachris.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e651b1e-17f6-5cc0-a4e8-b7d8de6dd84c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allssachristine.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allssachristine.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5088a7b0-2547-55f8-a64b-e9a2a1f6b22a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allstarbaseballnews.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allstarbaseballnews.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0512e080-c330-52da-b839-bcb75cb5d096","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allstarbusinessacademy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allstarbusinessacademy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aef41ac2-245e-5b02-8509-c9aacac27fb1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allstarsautorepairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allstarsautorepairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--997e6156-c304-5761-bea5-8bf5282d6885","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allstarsupdate.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allstarsupdate.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c1f3f57-3b44-56e6-ae82-05ae3c075ead","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allstate-claims-phone-number.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allstate-claims-phone-number.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d496d34-a70d-5eae-878b-88d038bf14ae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allstate-claims.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allstate-claims.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb648d08-1220-5bfc-8b4f-6b62dc65681f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allstatefcclassaction.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allstatefcclassaction.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d494b0-1ce9-58fb-86ac-5e69eac08537","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allstyletattooing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allstyletattooing.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afa3f7ef-fb5f-5ec9-80bf-cd8d6b6e7309","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alltaxlab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alltaxlab.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cf3dae5-b309-55ab-b64d-1118fc44b051","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allthemassachusetts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allthemassachusetts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f3d6965-85d7-586b-acd6-968f6b607a6a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allthepratts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allthepratts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00eb354c-0f7c-5c76-8637-1c7b088dc279","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allthewisemen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allthewisemen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7f8854b-0551-5854-b401-b8fd1d1d7ba8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allthingsannabeth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allthingsannabeth.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b95c284c-1680-58f9-9410-ae5a05be6147","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alltokensinterconnectingmigrateairdrop.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alltokensinterconnectingmigrateairdrop.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02f90e0d-1065-5687-affb-c63898a63f58","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alltopupdates.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alltopupdates.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b37f90d-66f0-5818-a5b6-f83ef59dfa67","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alltron.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alltron.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5defd66-a233-50f9-851b-08df7fc066d0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alltronai.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alltronai.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc90a745-ff79-50ca-a266-79e01c9718c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alltru-verify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alltru-verify.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb563c49-8f77-52d1-8b52-cb5420eaed68","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alltruist.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alltruist.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b671bb36-98ce-5c7e-b59d-9b6927f88345","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alltruistic.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alltruistic.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0880ee-9cf0-58ab-898f-5f497efc347b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alltrustfinanceplc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alltrustfinanceplc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80a0641b-3379-5a98-8b3a-75d50154809a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alltrustgame.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alltrustgame.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--885f4798-1272-5740-b989-4e26caa893c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alltrustplc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alltrustplc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--904996dc-450d-5208-a120-c9fa7e142fb3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alltrustpremiier.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alltrustpremiier.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--066ef2ff-ebe9-5cdd-b3b8-5b680bbe4e1c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alluanztravelinsurance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alluanztravelinsurance.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cf07a5c-e17c-53e8-bb40-80424b1c5700","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allupdatesonaustrailianreturn.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allupdatesonaustrailianreturn.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fdd75d5-ea7a-5407-b6e1-839a5708ea59","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allupsystem.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allupsystem.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ac8bb77-7fb8-5af2-9b79-a6ada0206513","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allusionshairsalon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allusionshairsalon.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--100f04d2-50ee-5804-93b4-94357088c7a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allusionssalonandboutique.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allusionssalonandboutique.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b9068e6-f7be-51bc-8d05-94b384ecd0e9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allverkolonlinealt.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allverkolonlinealt.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4a2c5f2-9f23-5849-aa9c-7cfdfbbd450a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allwalletshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allwalletshop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbd73df9-dcde-5916-8648-ce427007194c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allwheelchairsales.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allwheelchairsales.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e17beb9b-05ce-55cc-a52c-0c4477f90ed7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allwisescience.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allwisescience.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a18d6a5-f650-52bf-a417-a83c862efb61","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-auto-login.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-auto-login.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cf5d503-28fc-57db-8126-100e523f7249","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-auto-login.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-auto-login.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03cb8422-affd-5067-980d-0c69244439e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-bank-cd-rates.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-bank-cd-rates.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db0779a6-f59f-52a8-9262-801170383efa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-bank-high-yield-savings.bar","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-bank-high-yield-savings.bar']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--798dd5c1-8e55-556b-bbf9-5857b54694e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-bank-high-yield-savings.boats","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-bank-high-yield-savings.boats']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eb646d2-6ffc-5d25-98bb-e74b5bf8fd99","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-bank-high-yield-savings.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-bank-high-yield-savings.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ed8cc36-ca04-542d-98cb-d6496755aacb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-bank-high-yield-savings.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-bank-high-yield-savings.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46bdb17a-cf68-5bc6-85ea-564d0614f66c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-bank-high-yield-savings.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-bank-high-yield-savings.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1d460a1-f0fe-5118-ab05-9e13d2a6dd4a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-bank-login.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-bank-login.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88328760-a30f-569d-92dc-d03a230ab1be","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-high-yield-savings.bar","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-high-yield-savings.bar']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e82af8d4-3583-5910-a347-f9fd8066945e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-high-yield-savings.boats","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-high-yield-savings.boats']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7601bd7f-d5ed-5ee0-8292-79c546536b8b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-high-yield-savings.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-high-yield-savings.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ca2bb24-a5a5-5044-bc21-e22843a0a0d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-high-yield-savings.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-high-yield-savings.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23b09076-fdbb-5755-a95a-35ee1b78f0a3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-high-yield-savings.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-high-yield-savings.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9ef881a-0287-5eee-83bb-54481c0589ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-hth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-hth.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c22865-7ad1-56c2-8db9-92ea0fcb903f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-int.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-int.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--679cc35a-3df4-5a71-bfb1-e1f808b4aa01","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-invest-cincsc7c.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-invest-cincsc7c.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--485c2ae1-7ade-58b9-8f27-3083c27c4949","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-jiuyou.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-jiuyou.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5e1e6f2-3ffe-5ea8-91d2-80c3e935ab75","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-kaiyunsports.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-kaiyunsports.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1de91ba1-9b3d-5a76-9ade-e56a4248b458","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-la.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-la.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e52b3871-ca8a-5bb6-bb6d-e3f24c551adc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-mclean.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-mclean.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c289986-e96a-5814-8e65-61d3322abe28","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-official.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-official.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4595c6a-7de1-547e-b3e5-381d8c426059","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-pocket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-pocket.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e69ea279-bd44-5b9e-a550-b5f4e4c8f38a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-savings-account.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-savings-account.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e352e0f9-9820-58c7-9d3f-aa52421d9a50","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-savings-account.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-savings-account.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--811535af-87ac-54d5-8f09-7e7d43eb7b5e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-savings.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-savings.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9974a80f-4ff4-560e-bfe2-3df245c37555","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-savings.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-savings.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c46138b5-46b4-5168-8e42-954b61675d1f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-search.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-search.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7cf443e-4095-5d35-965e-b9e03060e1d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-search.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-search.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65c7491a-5e46-5253-bab9-50387de66cdd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-spin.casino","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-spin.casino']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a421cc9e-5dfc-53b6-bdcd-6c82587666a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-spin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-spin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09783470-9bbc-51d4-b9b2-e26e0bbadacf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-staffing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-staffing.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5082febd-0966-5cde-b1cf-af01d0db4538","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-starsports.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-starsports.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4aa16c9-6b08-5750-ab89-9ba237330fa5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally-worldcup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally-worldcup.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b428d807-720e-5497-ba39-d6ece8150c95","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ally100.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ally100.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b5f964c-9b4e-5f53-9ff3-81873f6f0966","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyacapitalpartners.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyacapitalpartners.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6978430-f16e-5408-b2e6-d3123f31d22c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyafi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyafi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d0936e7-f6ec-571f-bdee-daae9c5a5b4b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyaxis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyaxis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94791e4e-5964-55de-8c88-36a3e8c87632","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allybabcock.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allybabcock.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30ab6dc7-d5d6-5e8c-aeb8-4a2d76889a25","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allybaonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allybaonline.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b256765-80a1-5f56-be5a-de9d3b757ba1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allybloom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allybloom.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df5ed276-9190-5201-9de6-779901032dd2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allybuyshouses.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allybuyshouses.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f460382-c397-5dcb-a6d7-5abcca335c35","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allycat-tours.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allycat-tours.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb1c92e0-256c-5d62-8c69-aba458056a60","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allycme.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allycme.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6b5e0a8-2074-5799-b291-b32cc245ec4c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyconst.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyconst.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ac752b2-cb47-55cb-9b65-bb88b92eb6ac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allycooperation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allycooperation.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8433bcff-820b-5173-87d9-326014729d75","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allydenzoomdesk.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allydenzoomdesk.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baacfdac-b681-52c8-9913-d57a1b7e9c64","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyearauto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyearauto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--369dae2b-04c7-5270-a82d-f548e8955029","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyearfinds.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyearfinds.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18361f9d-8d17-58ee-bba9-c84607176fc5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyearidreamabout.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyearidreamabout.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f2e471b-dd13-5406-a560-fe86dda364bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyearidreamaboutflowers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyearidreamaboutflowers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd49971d-74fc-5c09-91e7-b7911d31e0c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyearidreamabouthalloween.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyearidreamabouthalloween.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4da3b13d-c237-5139-b316-d1b2d4f2e59a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyearoffer.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyearoffer.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--743f414b-7fa8-57bc-9834-46a7d8c5e6f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyearoffersnow.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyearoffersnow.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1186609-951a-59c2-ae94-8c259b23da85","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyearoffs.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyearoffs.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d99c88ea-796b-5949-9a53-82f1e628b221","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyearprizes.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyearprizes.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff8e6836-bce6-5dee-9d3c-d295b084b967","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyearsale.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyearsale.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50432b54-c1f1-5a1a-b53b-e37e1c616152","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyearswim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyearswim.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aafb7d2d-0593-57e7-982d-425306419aed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyearweld.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyearweld.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc10c1f-3adb-52aa-935c-80b638445a43","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyemerge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyemerge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ade24fd-2eda-5a96-9cb9-e3882c7e0f64","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyenergycompany.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyenergycompany.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94482ffa-7b69-5ce1-b709-86b7b679cb6e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyenglish.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyenglish.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40d62ed1-db80-5a2f-aa7d-61c0fd8f8f2b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyenglish.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyenglish.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eee429a-5336-5cf9-9c4a-d5a1e95f3752","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyesmith.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyesmith.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee6704e-ee81-5882-8c9d-9457478e3ed6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyfashionofficial.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyfashionofficial.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b48d796f-b8b4-5258-910a-e86900f193ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyfinancfundings.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyfinancfundings.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aefa0da8-176a-5d9d-abaa-78cf2ca8943c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyfinonlineb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyfinonlineb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e5d2994-f1d6-56a0-82e6-820ebe8f30d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allygma.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allygma.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8019191-b81d-53f7-a734-5d30db3abd51","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyhelper.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyhelper.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d66a32d-63e7-53d4-b6e7-7aa66e35d8e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyilian.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyilian.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b6b9b4b-0a5d-5fd9-a335-5c5b37d677cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyinformer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyinformer.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2431e786-a17e-5532-9512-00ad69f8db87","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyjackson.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyjackson.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8fc96bf-b9db-5485-b8f3-dfc087b368f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyjay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyjay.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18284dd9-71a5-5cf8-a5bb-82f9e72e578a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allykitchen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allykitchen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a92db49b-f2b1-5e25-967d-5d36b7d370fc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allykruger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allykruger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0399d9f6-98cf-504d-9d08-6e3994732187","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyleebath.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyleebath.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73d303fc-e3cc-53c0-b8a6-07cf7ad277b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allylgu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allylgu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf8a2bcd-fae8-50df-aa2a-3bd94f105e22","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allym.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allym.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d3fdb86-3c78-5b32-8e5c-f7c35d993ac3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allymiller.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allymiller.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d9c50c8-deae-52bc-9011-c6a9f29e5cd9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyn.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyn.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c247eeb-97dc-5e0b-b754-2071f77d4a11","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allynconsulting.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allynconsulting.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb6dc7c-0cee-523d-aee7-d49df9f28ae6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allynfamily.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allynfamily.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3df1ae1f-e01a-530a-89f6-79a71e9b1116","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allynintlcareers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allynintlcareers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68e87e05-1243-50f0-92b2-ce95ad62e1b7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allynintljobs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allynintljobs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a151fe95-c67f-5a7a-a266-3f3e87252ce0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allynlaing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allynlaing.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e52be02-668c-5a5e-a454-3584fcfdb049","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allynrnedia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allynrnedia.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2be9c63-0df2-5826-b597-3a76b6fb1cb3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyntowing.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyntowing.top']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fc0d056-104d-5161-9b8e-5bd3f0eb886b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyogahub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyogahub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad5ba762-519f-59c0-aac8-f39549219372","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyogavibe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyogavibe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2357f1c-6774-58b9-a45a-c8097c14753e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyoment.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyoment.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--858fdf71-386c-561f-8aa3-5cd26fb8b6a6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyono-a.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyono-a.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e444915f-1d8a-5ae7-923b-baa782aafac7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyono-a.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyono-a.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03979a36-f010-5927-a301-5891fe992151","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyono-a.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyono-a.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a747726-57b4-53d2-9813-0814ad5fa8c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyono-d.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyono-d.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9e93808-d57d-51aa-9b5e-28fa03437726","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyono-d.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyono-d.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccbddc22-b94e-5b7e-88e6-2429e05e55b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyono-d.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyono-d.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aac0b40-3ff9-56b3-b85e-17979ef0a285","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyono-e.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyono-e.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee080c34-ecc4-51a8-a212-5cf1937fe4bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyono-e.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyono-e.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e42c6f2-76bb-5ecf-85db-1526d0389638","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyono-e.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyono-e.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--369a689f-7311-512d-b53d-6bcdfaeffeb2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyono-id.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyono-id.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44932c2b-5e9e-51b7-a7f9-85c1ab1c81d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyono-id.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyono-id.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00868a32-37a7-5092-ad27-d9ef18fb60d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyono-id.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyono-id.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e6d0246-1df1-5690-875b-4fe9f17affec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyonoagent.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyonoagent.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d80886a-0725-513c-927f-3709b926c00f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyonoagent.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyonoagent.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8ed4008-1d44-555f-ab95-e6fae1891855","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyonoagent.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyonoagent.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dca4506-a7a6-578d-a30a-04481616419f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyonoagent.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyonoagent.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cc999ba-2639-5323-80bd-8a414cd8875b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyonoappshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyonoappshop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e00dcdf3-0139-5a55-9d49-e9da12f5ebd5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyonos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyonos.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d9445fa-8eb6-50d9-9d2b-0d9368fbb86b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyonos.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyonos.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7807e428-2ca6-5828-b76c-700894564be4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyonosgamers.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyonosgamers.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4ae6b94-e042-5072-97fe-bcdb72b8be39","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyonosgaming.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyonosgaming.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d1e6bf-5783-5a59-ae98-d05313eb9ae7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyonosgaming.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyonosgaming.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67964553-8430-588a-a938-11f96e561e40","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyonosnewgame.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyonosnewgame.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e273e32f-dab4-5c61-9ffb-50b432f4e6d2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyonospinjaihogame.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyonospinjaihogame.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0c2454d-08b6-5cad-9c80-da9b80fbc230","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyonospinjaihogames.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyonospinjaihogames.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91335850-6d87-5b91-9e6e-8961cf7ca4e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyoteshin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyoteshin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c5f517a-dee3-57ee-aafe-04449530a97d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyouare.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyouare.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3c6f7cc-af76-5158-b146-f7ff96360d0c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyoucaneat.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyoucaneat.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95cf3508-0356-5408-9123-aea54dd0c760","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyoucankaiju.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyoucankaiju.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af3c0e55-2fe3-50d8-b845-8a1082b24061","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyoucanstock.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyoucanstock.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f697955-373d-55ab-b34e-e4facc40dadb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyoudois.gripe","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyoudois.gripe']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--387f4110-2a58-5ab6-ba93-fc2e93d5bdca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyoulikes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyoulikes.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10b90acb-2c4b-57c4-bc3f-6a32f792dd99","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyouneedstore.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyouneedstore.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9695412-08ff-594c-b409-5846e20b3361","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyouneedtranslation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyouneedtranslation.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31299265-4e2b-53a8-8e69-14c90f776221","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyourbankarebelongtous.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyourbankarebelongtous.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bfb63ac-2369-541f-a022-80a13614f1b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyourdogneeds.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyourdogneeds.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--009a4ec7-78ac-5460-a262-19c21a3d25b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyourfiles.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyourfiles.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff6c5706-83d2-5a9d-ad73-e76fe0743c46","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyourgood.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyourgood.top']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e623bf09-10f1-539c-afce-a7b4efcfdd00","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyourhostingneeds.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyourhostingneeds.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3271d574-1b55-5311-9e6b-bf85b28bccd4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyourneeds.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyourneeds.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cb0ec41-8d07-58c8-8197-7671ff93e3c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyouroutdoorsupplies.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyouroutdoorsupplies.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42f0b506-2f27-5e50-8650-95384987f24f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyourprice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyourprice.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a5fd7a5-12f1-5ce1-b849-010598a7616d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyourprices.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyourprices.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29ea3075-e11c-5908-9f1f-0d29213d360e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyourquestionsexplained.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyourquestionsexplained.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a24583b4-6ab8-5d0a-a88a-5a98fd13ab5e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyours.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyours.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a7278bf-16f2-59df-9302-d7034df00ec1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyourtv.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyourtv.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c00d7803-eff7-541d-8966-64f91e1f86c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyouwanttoknow.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyouwanttoknow.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad8de12-d34c-51ba-a45f-199377bc033b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allypeer.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allypeer.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf6a0991-639f-5dc1-89ea-29b0ade077e1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allypersonalcare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allypersonalcare.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11282d9f-086c-5e00-8876-2a056224da6d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allypleflux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allypleflux.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f837c98-e420-5a60-b3a0-deabeb581b08","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allypoolcare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allypoolcare.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84e06fac-c697-5eb5-a4ae-983788b7f499","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyprocurementllc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyprocurementllc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e74a147-bdd3-5ed1-bb96-c139be9f14c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyque.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyque.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d27f6a3-a3e9-5fa3-b99a-552170c59020","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyquecare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyquecare.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b43db4fc-4a74-521b-b057-f0fed3bf124b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyraisman.bio","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyraisman.bio']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c93341c7-5c8f-55fc-b25e-48d5e5c1d15e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyrroas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyrroas.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6acbbdfb-853b-5ac9-8c62-d676c508a228","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allysanimalproject.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allysanimalproject.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beceecd5-be2e-5930-9798-03d75f611510","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allysbu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allysbu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a3b0b97-b1a5-5acb-a1e7-f78f9dba5e2d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyscocina.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyscocina.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a61341f2-3f43-5974-a788-be0ba7c154f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyscosmetics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyscosmetics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48388e28-0c96-598c-84e2-85843b4410de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyse.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edd0ae1c-efec-5d5d-b7d7-e735176d8477","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allysearch.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allysearch.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f027799a-8a21-55d7-9fe6-4316e4d62ab2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allysecurespay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allysecurespay.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d52a8b69-4cfb-51a8-8ea4-4b25a25d0a05","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allysheedy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allysheedy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6926cb2b-8d45-55e4-9153-d50e65d2c9b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyshipservice.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyshipservice.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439987b9-7aea-56a5-b8bf-9205e06a9450","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allysin.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allysin.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0be785e5-cdfe-5544-8227-20e8808ef4f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allysmokegrenades.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allysmokegrenades.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec6bf6d6-405d-5c1e-9247-87a298141c06","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allysocialstesting.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allysocialstesting.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c440845d-5f13-5701-b8f3-64f757c92466","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allysonarms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allysonarms.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42bab98a-0680-5d54-8ae5-a29c34336891","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allysonenglish.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allysonenglish.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc8783fa-ac3c-5fd8-b52e-42047b4aa8b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allysonenglish.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allysonenglish.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86dfaa7b-f167-5c89-8e39-c492507a1165","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allysonperez.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allysonperez.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36d1e5d7-d2f7-582d-8ea5-18ab7aa63472","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allysonsshroyer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allysonsshroyer.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--867c0d5e-857c-5b56-9953-987aac8ccc38","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allysp.in","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allysp.in']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99debfda-cdbe-50fd-9992-8898bb2e55e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyspin-fr.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspin-fr.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7148aaf1-2309-5523-984f-e9c5b05c5d19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyspin-kasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspin-kasino.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--178fa9a4-1327-58db-8779-b55d3a795f69","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyspin-nederland.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspin-nederland.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03543c7-3664-56cf-b5b6-6604328f5fd2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyspin.casino","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspin.casino']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db91259a-7092-5778-a169-7045b6ed9834","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyspin.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspin.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73594e70-674e-516e-940c-d91a6e411cbe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyspin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspin.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b21c4a4c-cd6f-5c7b-b2e1-bd079e2c8ed9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyspin.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspin.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--192ef9da-0708-5847-83d3-27d9fe4a338b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyspin.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspin.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c045710-6975-5d51-b14f-14032d934a3d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyspin777.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspin777.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5955505-367c-5e95-9792-91a87eb3e2f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyspincasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspincasino.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--764e19b1-ce5c-5b15-b22c-38cd31c3d2ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyspincasino.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspincasino.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f65d90b1-b06c-57eb-81d6-e2ef4311806b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyspincasino.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspincasino.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--812bedbe-5a0b-50c0-85f8-dd1e7fd2619e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyspinnl.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspinnl.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18c1f28e-d35e-5ed1-a6d3-527b1cc5194b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyspins-fr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspins-fr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05273dd7-4b06-5f04-83d2-66abf4036c1b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyspl.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspl.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0722855-966f-572f-8487-235fc6888bf3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyssahall.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyssahall.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beeae6a0-c35a-5d73-981b-225eab97d4bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyssaprice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyssaprice.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a6a2f7c-31e3-5e10-bee9-421084c4a3f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allystoybox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allystoybox.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9dfa2a9-da92-5fe9-968e-ba024e441f5d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyswift.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyswift.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0965fac9-1a5d-5f18-9c7c-a4995b9a8a6f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyswinton.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyswinton.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--759c85a5-1fc0-51ca-bb81-0f3f7be4a271","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allytechmachining.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allytechmachining.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ed8d011-b205-5ae5-b03c-22801a660066","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allytransfer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allytransfer.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fabcf86-a5cd-5851-8da9-71879210a931","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allytrustshield.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allytrustshield.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2161524f-c132-5623-9a49-4018c2a6b7df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allytyping.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allytyping.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a34d6f3d-853c-5a6a-be57-66cbefca3330","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyummyfood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyummyfood.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0976cff4-2ddf-5b2a-af02-1db1ddb333b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allyuristy.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyuristy.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d569311d-9478-5889-a314-2ed6ad88d11f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: allywebsite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allywebsite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e668dff-bbb3-5df1-9e98-3f003711b8da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alm05tthatt1m3.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alm05tthatt1m3.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aecc4d79-3091-59a6-8984-66f0090bd84b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almabases.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almabases.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d358358-128d-5e5e-af2a-8870277319ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almadnielectronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almadnielectronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f74140cc-b894-5c38-9c52-36f6e8697c3b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almaktoumintlatives.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almaktoumintlatives.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9538255d-e24c-507c-8abe-352727cc76a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almanakpresale.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almanakpresale.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60831ec5-544c-5ba8-8aa4-a42be7bd313d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almansourmnsvisa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almansourmnsvisa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b86476e4-1eb3-5197-8e67-8b5daa3b5ca6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almanzarortiz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almanzarortiz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b33ae1b-2949-5a53-923d-f744956a3c7d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almanzoma.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almanzoma.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1463fd32-87dc-5abb-8bb6-4f967fa2b592","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almaralo.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almaralo.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ccd7fd7-a23b-5884-b290-c3a1b39468d3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almasanabalance.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almasanabalance.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d23230be-9370-57d8-892d-a077b7293592","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almaserenab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almaserenab.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0279bd59-af17-5e13-bb79-6a1e081f2eef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almassae.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almassae.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--955ccc8a-76d0-569e-8d24-bcc3e4330c57","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almassar-altaweel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almassar-altaweel.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f2341e8-27b6-50d4-b7e8-9e85453a789d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almassara.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almassara.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a71722a-2303-512f-a94a-6a4751964c88","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almasuitesmadrid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almasuitesmadrid.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--516432d5-c4dc-5f44-9ff3-e00a63808e06","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almatters.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almatters.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65910b5d-9961-5d1c-b10e-897058b27d3f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almaty-tranzit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almaty-tranzit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0af6d314-a5ce-5c40-bd10-7c68ef67ee18","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almatyattorney.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almatyattorney.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f3fbd4-6650-5da1-b6ad-4b82264cbc5a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almayinvestigationlawsuit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almayinvestigationlawsuit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a59a599-ea0f-57d9-a407-966986e72be4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almecogroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almecogroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d6891b0-e6ab-5915-a914-29bdc01ad8c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almidhnabhospital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almidhnabhospital.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--135c34a0-3800-58c8-a1ea-83bd740fb5f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almintegration.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almintegration.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41f4723e-651c-5e65-ad1a-07134e053077","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almintegration.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almintegration.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a56538c3-56fe-5225-b52e-ee146141fba7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almintegration.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almintegration.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fe7bb90-42c1-5e50-af15-b950dd753d4b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almoatthda.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almoatthda.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2a5136d-f58a-5163-9f2e-38e0f89cfc7e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almohandessa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almohandessa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59ec560a-7f47-5403-9c97-989dc0b5d5c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: almwise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almwise.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99ec1d72-bde4-529a-9e92-1086c53af691","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alnabaat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alnabaat.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15cf021a-86ff-5ac2-844f-14e7d1b3ee4a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alnabaat.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alnabaat.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c1b0694-9450-5624-a1f0-cb6d32be8d7a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alnabani.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alnabani.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5697d7a5-1f56-5bb4-9d7e-0d96dacb96c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alnabhan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alnabhan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f7cc2fa-16e9-536e-867c-4032d69343bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alnabilacairo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alnabilacairo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fb783ba-e593-5c92-be25-52b77f1e210c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alnassab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alnassab.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ebe8514-3b01-5336-88d3-1635eb41f1ba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alnewssaudi.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alnewssaudi.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c148da86-35fd-5608-a1db-c9ae78672e64","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alo789longanabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alo789longanabet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4405a38d-fcd5-596e-8b35-732c4913f6aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alogically.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alogically.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--361a81e7-b51b-532d-b39d-786902625d83","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aloha-collectionussale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aloha-collectionussale.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26403346-d4de-5c47-bc36-64f812a877bc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aloha-northshore-massage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aloha-northshore-massage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9ecb54c-2b78-5912-9ba5-743dc2de4bd2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alohaacrepairsunrisefl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alohaacrepairsunrisefl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9354e71-2605-5f8b-90e0-c0f54cf53d13","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alohabitcoins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alohabitcoins.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b46f39a4-99be-5fd4-8e2d-0398e07642ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alohaussale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alohaussale.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac2077b6-f6b1-53c5-bc62-0d21aee24733","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alojandoargentina.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alojandoargentina.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bb30187-df20-5f90-b091-d0a87d91545d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alone09bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alone09bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b2e2346-6659-5468-9851-5056e5df3822","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alone09bonanza1.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alone09bonanza1.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fedbee7-8680-5aec-b884-b7e14e927ec7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alotofeletronicususa.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alotofeletronicususa.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48f2747f-83b7-54a5-b29c-2cc4c1e7d93d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alotofsecureapp.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alotofsecureapp.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3c43f25-065b-5cd3-b2cf-0505d940717e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alotofsecured.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alotofsecured.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--980ea3c9-a004-50f2-b359-0ed519752e52","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alotofsecures.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alotofsecures.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f0d4ceb-e19e-54c2-9a20-0ce04a79c83f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alotofverify.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alotofverify.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08607dd2-8eba-5c48-87e4-a948f70d49d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alouissamba.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alouissamba.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62eb8efe-76b4-506b-a6c6-34d94a704aa3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aloyogaargentinaoutlet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aloyogaargentinaoutlet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38882318-2b28-5ff2-ba99-68cf91842431","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alparslan96bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alparslan96bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3178ee74-7408-516b-b32b-12a2f1cd2548","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpay19801bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpay19801bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61dd26bc-bdf6-51b6-b265-d16ea50d453d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpendtrust.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpendtrust.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85e01b4c-b7a8-597d-97f0-cb949359a913","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpensattel.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpensattel.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5336ba52-7f67-5df5-a324-5dd33a171fff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpentrust-advisory.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpentrust-advisory.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b56128f-36ad-54a4-bba3-92473dc4e376","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpentrustcapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpentrustcapital.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56346a8c-ea57-57ea-a356-7ec87f5aebca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alper1941bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alper1941bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63f67a0d-658a-58c6-83be-ece5280c3e17","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alperenabacivip.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alperenabacivip.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ebfb02a-9280-5e15-97c9-053b7a4f9de5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alperenkayabonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alperenkayabonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcb3174c-2942-5f5d-a7d6-d215f6e192e2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alperkaraca532gmailmey.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alperkaraca532gmailmey.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4954176-0700-552d-8b90-c6f3014dc7f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alperteomanzula.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alperteomanzula.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71ea7fd1-bbe4-517f-a136-59a9d24c7f88","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpertunbonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpertunbonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e4a1e5c-5aed-5e66-9e20-e4c19abf1c0c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpetralink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpetralink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28e7e6b8-5b1f-5050-a0db-2321b51251e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpha-gr-ekyc-update.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpha-gr-ekyc-update.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12b22492-9dd3-59fb-92e4-86a028d58ede","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpha-gr-update-ekyc.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpha-gr-update-ekyc.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbb21464-d74c-58ae-b43d-d7b9278456d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpha-telegram.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpha-telegram.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa2cf80c-5ec7-594b-a4d5-a5f4a573ccc2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpha-vault.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpha-vault.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0970e5d0-ce74-5111-8c83-c85e031722ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpha-vault.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpha-vault.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6441e07-45f5-590c-adfb-c4fa375bb4aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpha1trk2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpha1trk2.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3391c331-2cdb-57ec-bf0a-27b2c41a664b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphabasefinances.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphabasefinances.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8008ffa-f751-5fc3-820f-19908f2186a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphabetambassador.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphabetambassador.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea4705a4-2760-5047-af8d-7e728f8a6ad8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphabetattires.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphabetattires.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b47efe-91f5-56b2-809a-14ef604c9d6a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphabetfarms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphabetfarms.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73546ce0-e49e-5368-b123-af8a480e08b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphabetvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphabetvault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b1323ff-e7e8-5fe1-9db5-8614ef6e0c05","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphabridge.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphabridge.biz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b09868b-da5e-5773-b32b-382187899c0a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphabridges.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphabridges.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96fe2bb0-7082-5deb-b23b-e4ed00e093cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphabridgesystems.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphabridgesystems.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11d03117-f13f-5797-bf40-e5b05c47c6fc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphabridgetrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphabridgetrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a4821f4-5109-592a-94b6-edc2d162fc9a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphabridgetrusts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphabridgetrusts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41b63795-813a-5307-be10-ca1b5dd018f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphacapitalbitcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphacapitalbitcoin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--712a3974-cac8-51c8-8af7-5dbdec9e9e00","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphacapitalone.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphacapitalone.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349cb5f4-ba9a-5fb8-ad6e-7336c6521a1a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphacitytrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphacitytrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c7fb923-ce3e-58c4-aca5-57daa3d685f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphacryptobot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphacryptobot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af783a51-0ffd-5c6f-9619-3e1988a9b326","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphacryptohub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphacryptohub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0a5ee56-9bb6-5314-b75d-a93ad56c85d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphacrypton.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphacrypton.biz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08cabfa4-7b3b-5b20-b488-7cee52293e3b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphacryptonova.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphacryptonova.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--892eca82-6390-58b7-9762-0b4a80585dae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphadallyparts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphadallyparts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--110c1159-4e08-5898-89f7-5302bbe5c5e6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphaelectronicdevices.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphaelectronicdevices.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65fc9362-8420-5ebc-8013-db2b6622eab7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphaforextrade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphaforextrade.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3af6d45b-dc8f-5f26-9efd-19663954aa67","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphafoxtrusteeltd.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphafoxtrusteeltd.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5700933-79eb-5ab9-8742-5dca7e155a71","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphagroups.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphagroups.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d148f27f-e797-5edd-86ef-73b725dcf2c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphagroupsfx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphagroupsfx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--207e3c97-5952-5785-8414-2abbfe7695e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphagroupsvcs.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphagroupsvcs.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f64b2728-b9be-5386-97b2-0114e808afd0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphaonsolana-airdrop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphaonsolana-airdrop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32a6581d-407b-5ee5-ad2a-2102dd7dea3e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphaprojectsonweb3connect.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphaprojectsonweb3connect.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6c225a9-7eec-5cbb-90f7-754edab6fbe8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpharockgroups.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpharockgroups.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe540bf0-3ec9-5b20-ae18-8eb02e25836d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphasecureinvest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphasecureinvest.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e406a822-1a60-5fb4-afbf-268cccef4a11","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphasecurityvaultservices.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphasecurityvaultservices.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--515fc52e-5e6b-5d34-bffa-2346701e3e5b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphasledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphasledger.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c5a67f5-00c5-5efa-ab1b-67c4f46d4fa3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphastrong.blog","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphastrong.blog']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dc0a3a4-d367-505d-affd-a12d09bde390","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphatrumpsui.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphatrumpsui.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04064847-7a86-50dc-bf0e-0d5c916120c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphatrustfinancialgroup.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphatrustfinancialgroup.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--997b900c-de83-5baa-846b-670f46320b62","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphatrustheritage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphatrustheritage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa445fb9-63cf-56e7-bf4a-f4ecf7cee552","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alphatrustplc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphatrustplc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a65e0f7c-eea5-5fcb-bdd3-b66420a39063","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpiiestattess.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpiiestattess.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24da2876-fa52-503c-a4a6-34ec6fb6641c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpineconsultinggroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpineconsultinggroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5271cb0-4678-5514-b423-5e27f1c4211a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpinedatabases.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpinedatabases.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4ce53d2-d858-59c6-b915-3f4ffb37ad49","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpinelimobase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpinelimobase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cecf610-4b8b-5c2b-963d-4cc440b18939","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpinemassageandwellness.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpinemassageandwellness.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1837b118-a882-5e49-97e2-5cf882b17b16","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpinetradebase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpinetradebase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a64ef0c4-5998-573f-982d-ca6471a82920","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpinetrustcapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpinetrustcapital.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ab3d57b-5112-5ac2-938f-7ff472741953","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpinetrustpartners.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpinetrustpartners.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e29ace4f-bbb3-5187-868d-e38067be0630","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpledgera.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpledgera.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b11c0b40-5c10-5ec0-a053-3f2a7f58ee87","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpo4434bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpo4434bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--490495f8-6554-5f22-88b3-027991403df5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alprnblcibonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alprnblcibonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1456ac1-83a7-52e7-a312-4e65f5981b61","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpsautorepairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpsautorepairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22f51475-20c8-5e9f-b320-df0cee41af48","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpsavoietransferts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpsavoietransferts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fb73cb8-7113-53d5-a328-882021b3b405","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alpstep.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpstep.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e93f56c-1cae-5346-9d29-31f9d8c590bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alptrustgpt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alptrustgpt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1105c399-f235-5a8e-9cf3-4aa3f52a53b7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alqalamtrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alqalamtrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bacba58-d9e1-5176-8894-cc03f706eee6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alqalamtrust.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alqalamtrust.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6007a33-c372-5c9a-b753-e5182213e507","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alqalamtrust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alqalamtrust.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cd42575-a13a-5f61-8f47-849010da1f58","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alraiyanrepairshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alraiyanrepairshop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d398540e-d8d6-52bf-adcf-8badd6521646","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alraya-suites.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alraya-suites.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dbbae37-5ac5-528e-bc63-889ee52a0dc1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alsabridge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alsabridge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e372ec35-5f5a-5887-a2a2-03fc50b9c2b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alsamiounmadrassa.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alsamiounmadrassa.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64006b85-6da4-5513-b28a-7273f020bab5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alsawsanfarms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alsawsanfarms.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9da91688-7611-56e4-ae48-9b9173aca672","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alselectronicwholesaleltd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alselectronicwholesaleltd.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7de0a43a-3014-5d81-a0a4-4c5d3243d87c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alshafiwelfaretrust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alshafiwelfaretrust.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc949e6c-af7e-50eb-9b5c-ea8889f6fe65","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alsnabelsa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alsnabelsa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f92a9a0-0cd8-5a80-8ec7-a167330905af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alsoussa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alsoussa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b7942f9-2269-59a0-99d3-b25e7eb76761","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alssa.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alssa.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37288ba7-41fc-5db5-beb5-e9b159755708","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alssac.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alssac.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f2ee1f-10c2-577a-bcd6-7b39fbb0929a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alssanad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alssanad.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3acd2f14-96b1-5203-8e3b-9b42155c5e28","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alsyifatelus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alsyifatelus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd9265b7-9637-52dc-95c7-4078909280be","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alt-token.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alt-token.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--147df27e-f187-52b6-8583-564fdf6d665b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altadenafarmersmarket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altadenafarmersmarket.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b821f9f-724b-57d5-93fd-23beb2efdbbc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altagastronomia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altagastronomia.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91119346-c514-59a5-b15d-197229e33932","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altairservices.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altairservices.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b7095f0-826d-55d6-a135-0e78041cfd61","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altargenta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altargenta.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be7f60ed-bae3-578f-bdad-d9700c523275","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altavalpetronio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altavalpetronio.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f956f26-ae58-571a-944e-94401512744c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altclaim.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altclaim.biz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f9f0dba-012d-5176-bf98-77456a3096bc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altclaim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altclaim.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77f326ab-615c-5f5c-a936-6f0093a52229","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altcoinbased.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altcoinbased.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--902de68f-acec-5f04-83b0-711df695237a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altcryptogems.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altcryptogems.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b45a17d4-a426-5aeb-aba6-d97d0150f2ad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alterwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alterwallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08bbab98-818e-551f-8a4d-b6990a77d38b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altitudeattitude.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altitudeattitude.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1c4284d-57fb-5ff7-ac5e-2b0ba2e20680","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altitudewallets.monster","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altitudewallets.monster']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--903f4a6c-f60a-56e2-b093-0d454c02e30e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altlayer-restaking.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altlayer-restaking.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c90e2852-0636-5d13-9338-e4554fa95e0d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altlayervault.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altlayervault.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f3f8722-6bc4-5396-a906-5246d461a608","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altmedguide.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altmedguide.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2559ce-0955-5bce-a496-a0d10d6495ba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altnft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altnft.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d96692d1-8f24-51bc-acac-416e2d6aa132","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altocannabis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altocannabis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2afbd015-2c2d-5692-9288-0b5aaf84e5a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altosfirstplace.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altosfirstplace.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--747132b3-3a83-58ff-a347-816d2fd0759a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altrady-token.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altrady-token.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c10c3b18-5047-56a5-ba70-debe3e887408","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altrivoxbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altrivoxbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1c02257-8e59-5309-94e1-d908d6955257","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altronair.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altronair.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a35a8e10-a234-5d4c-8ed1-df008eb3cf5d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altruist.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altruist.team']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d06f832-d751-5129-b0b3-64226d37860b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altruistcareers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altruistcareers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bff1b4b-3360-5c29-a97c-4af86000a95e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altruistebikes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altruistebikes.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2411bb3-52e7-56a7-ab28-54d2980fd57a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altruistechluminary.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altruistechluminary.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8567c246-e3e0-50e8-b804-2a05f8c51bee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altruistek.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altruistek.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b468ce9e-c803-583a-a537-b6b7803696db","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altruistic-cut.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altruistic-cut.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6b8ad63-b8b4-5bd0-803c-9cbeffdd72c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altruistic.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altruistic.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9ccf678-be97-5648-8b75-f503e9da1d64","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altruisticmarkets.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altruisticmarkets.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e752adfe-b7be-54d3-8266-38605a28b353","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altsecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altsecure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93ce6ee9-d67d-5d87-b705-0811fbcf543f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altstaking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altstaking.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3812864-a918-50d5-83ed-44d12bf69a6f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alttextinteractive.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alttextinteractive.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dd3e61a-a063-5d71-b208-20941ed8833c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alttextvault.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alttextvault.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b578508-16df-58fd-bc38-0339f9f27521","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altuntaserdem090gmailvip.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altuntaserdem090gmailvip.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67bbb52b-095f-59a7-a385-9e7c5ac7d247","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alturatoken.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alturatoken.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8763bd98-1b9a-5d58-8dfd-1326b0bfe183","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altuscrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altuscrypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f920a3f4-8684-51b0-b9d7-ea3f6dde6a9f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altusqroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altusqroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd531f89-f3d2-586a-9c9b-02b088dd34d3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: altynwallet.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altynwallet.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--179f0ae5-99d8-5f41-a666-f9b5cd9b62aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alugardenbridge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alugardenbridge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f011dc-fd1e-5a37-ad83-a9c1cea726b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aluhsda.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aluhsda.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46627ab7-6b25-59f0-ae77-172b3d457c66","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alulamassage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alulamassage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f427186-0cab-5b1f-81d6-70562fbc208a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aluminabeads.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aluminabeads.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--177108de-f9ec-5dab-ac1d-a8329eca9ba5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aluminabricks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aluminabricks.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d63558a0-81c0-508e-b13e-99a8ff04c6c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aluminium-garden-chairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aluminium-garden-chairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c13e94e1-1c36-5415-ae60-92f5d3566ce5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aluminium-table-chairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aluminium-table-chairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cce1e686-75e6-51bd-980f-9aaa32566158","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aluminiumbatteries.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aluminiumbatteries.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11f3d0c9-f97f-53c3-adc2-a98465675a93","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aluminiumgardenchairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aluminiumgardenchairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8e0cf77-3fe6-59b9-a129-8ec57ba12224","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aluminiumtablechairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aluminiumtablechairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a74cbd-628f-5a97-899b-b8df23dd22d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aluminum-chairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aluminum-chairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9d69d0e-d398-520b-973d-3879baff6cbd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aluminum-folding-chairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aluminum-folding-chairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79bd1411-af7c-597d-b0fa-7959281b00eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aluminum-lounge-chairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aluminum-lounge-chairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f09bc474-6dff-55d0-b3ea-addd0a5dd01b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aluminum-table-chairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aluminum-table-chairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d502df9-711c-51da-8b57-b71acbaa29a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aluminumbatterybox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aluminumbatterybox.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20e8b918-3df8-52f9-8c6a-12679d0fc04e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aluminumfoldingchairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aluminumfoldingchairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb8ada6-eb4d-562a-a0dc-ea9a4633ef39","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aluminumloungechairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aluminumloungechairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24bd45d2-522d-5782-ac5a-18611a2da9f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aluminumtablechairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aluminumtablechairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5ece60f-db69-5a8c-8077-db8e912a5b9f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alunabioessence.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alunabioessence.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--096c225b-7f54-54f5-91cc-7ea7428dfd43","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alunabioessenceao.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alunabioessenceao.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1342f4e6-7a7f-5cef-9334-972b74d3cdb4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alunabioessencelo.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alunabioessencelo.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d9a163c-f8a0-58e6-842e-d63a7faf009b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alustairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alustairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--babe54cb-dd37-592b-b97e-edfe1775187a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aluxcrypto-dex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aluxcrypto-dex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14903828-22e5-57e0-ac67-b12faa181e4c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aluzelle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aluzelle.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--318f44ba-f7a9-5464-ae95-e4192bcd9e39","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alvajanz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alvajanz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4758220-d936-5eea-9ec6-2f1c290aaade","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alvancegroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alvancegroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5355bedf-8c19-531d-8e9c-bfadae03af0a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alvendatrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alvendatrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3604d51a-c4ed-5388-b816-e1efa5a6a58d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alvesbarcelona.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alvesbarcelona.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab41b327-12ec-556d-989d-05646e87e9e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alvisai.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alvisai.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e23253e-4fcd-547b-a890-a6e8798cd0d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alvorcare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alvorcare.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9194e03-feae-5254-997a-ccc123d09ff7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alwassat.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alwassat.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63505a33-469b-5e9c-a861-ecda8eeb7561","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alwattany.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alwattany.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bf66bd1-2c33-5e62-bb2d-766cbb80a618","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alwaysclaim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alwaysclaim.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df851424-1de2-502c-b3b2-2583471aa47b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alwaysinpursuit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alwaysinpursuit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccc32b66-c873-594b-9f8e-0f38a3dcedd6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alwayskrakensocials.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alwayskrakensocials.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3267f923-7ec0-569e-818a-0c93702541ae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alwaysonelectronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alwaysonelectronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f18bce34-8866-53d4-b82d-be7ef3a23bb1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alwayspups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alwayspups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ee3a550-b9b6-523b-9e93-22af783fa417","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alwaysussale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alwaysussale.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--676ba059-7eda-5a39-bfc7-cd79e6959a71","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alxjvbmoyoytrhjp.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alxjvbmoyoytrhjp.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd785562-139b-5740-ac9f-7e375f1e1ab9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyanabih.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyanabih.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--318c28d8-b83d-5dd4-9882-1b644ce47f2f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssa-martinez.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssa-martinez.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f3daa46-5e8d-5652-a799-d7ceef0d4575","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssa-w.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssa-w.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da6e2369-ec3a-5736-a770-c5ea1c5837ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssaandadam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssaandadam.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eb3903c-dcf1-526a-afd5-4b7f930826e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssaavant.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssaavant.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05bd246e-29a4-51d6-a717-2c1151216785","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssabaumgartner.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssabaumgartner.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4b042d5-a00b-5998-b921-28d77e6cfaf2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssacorsino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssacorsino.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78c7ad47-1502-5f69-828f-6ddcc7c50ce6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssacox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssacox.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--682c08a0-acb7-5873-8c5f-c1f0dd9fef93","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssacoxmusic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssacoxmusic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c676e3ac-7863-581a-9d9b-02eea5e498bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssadelrosario.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssadelrosario.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--851983b6-5ab9-5934-b41e-9d71f0a56ccc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssadolls.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssadolls.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4348fef1-524b-53c5-ad25-1c43473a9ce6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssadomo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssadomo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f7623df-1160-59af-95f6-50d4f538c7f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssadumblewskiphotography.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssadumblewskiphotography.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7857d46-0893-54ee-8bf7-df0cb86b44d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssaedwardsbingo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssaedwardsbingo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--480d407e-5a09-543c-9985-d43fe350b505","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssaeventos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssaeventos.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef6c4d71-3f80-5c42-92ac-e80b6d920f47","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssahanalee.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssahanalee.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4355e76a-c0c6-5dd4-b564-55f7556e6190","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssajohnsoninc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssajohnsoninc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f4ab384-fcf8-581b-ae1a-bed0b2ec2a03","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssajoydesigns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssajoydesigns.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec057e7c-6550-588d-aad1-f9629945fb85","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssalnsights.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssalnsights.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--502a8e2e-c1fc-54bf-b25f-c4b4119f5e70","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssaloera.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssaloera.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71a6fc7-5eda-52c0-ad93-f8a5d8764cd0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssapopov.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssapopov.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bdddc6b-6fa5-5f10-89f6-dc142a914176","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssasalazar.blog","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssasalazar.blog']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d54dd2a-80d1-5cd4-9efe-16a2f480cdc6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssatess.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssatess.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dfd76f8-3bf9-5fcf-afb5-1326b1268b6a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssatong.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssatong.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d19bd954-12bd-57a3-bc96-30e66b497682","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssaux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssaux.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b73d0fd1-e6c3-5b47-a623-da501528c314","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssawear.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssawear.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44f621e5-0618-5449-ab12-e62876a8925a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssazucchet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssazucchet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2456e122-d94f-57ee-90c5-672838b3c54b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alyssazwonok.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alyssazwonok.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8f51598-76e3-571a-8378-443ebc270bcd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alzexa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alzexa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f97f4728-7497-59ed-84e1-94a4725be38a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alzorainvyra.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alzorainvyra.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--676894b8-e78c-5017-b912-7c394ec76619","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: alzoramp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alzoramp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6299bc9a-b155-5176-ad4d-8f65c1490177","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: am-adblurb.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'am-adblurb.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21f2c614-a3ae-52ae-9567-9df67ed5ac2f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: am-amazon.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'am-amazon.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfda3c91-9f2e-56fe-9ded-ea0dda166c00","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: am-batteries.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'am-batteries.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfd5baf5-4f2d-5dbd-8804-c4dde0ee8a60","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: am-i-actually-the-strongest.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'am-i-actually-the-strongest.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40e9a43b-3948-5fa8-ba47-a5972b551f2c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: am-i-actually-the-strongest.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'am-i-actually-the-strongest.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29ea6e61-d415-5d49-ab8f-5ba07c8729dc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: am-suivi-dossier.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'am-suivi-dossier.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93e85fd1-d993-510b-ad80-1a6eb2f7be50","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amabatanzania.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amabatanzania.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa3d28df-9a57-581b-bf3d-3507f8df3c64","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amaderelectronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amaderelectronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afbf3c29-b9be-593c-a4ec-463f6701fab2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amafarms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amafarms.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4650b95-322c-5f45-a7f3-0d356c6e6b29","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amafarmtribe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amafarmtribe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a3d19a6-5703-5825-8832-f7646bc6238b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amagohfarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amagohfarm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37a68ec4-8015-5470-a87b-8c8d6789ce00","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amagsuite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amagsuite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56824ebe-c2ce-5d52-8d19-b3690338d996","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amainabout.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amainabout.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee0d62ae-7aaa-55ef-a05e-534903937f64","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amamazonapp.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amamazonapp.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab0f045a-dfe1-55d4-9b43-eb71e963d0f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amamazonapp.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amamazonapp.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4039b7f5-e7aa-5f66-b7ad-68fd89dd83c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amanabag.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amanabag.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e18379e6-783e-5ac6-97ba-e545e74f311b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amanabclot888.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amanabclot888.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f28af0a0-d092-5d62-b0a4-f607cede65f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amanabclot888.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amanabclot888.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c72b2469-8620-562c-8386-a572a6252208","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amanabclot888.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amanabclot888.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de321b03-8329-54ea-86bd-8da0d8cef41a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amanabclot888.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amanabclot888.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ff95a8c-f049-5e21-93d6-f982ec9e71d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amanarepairservicecenter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amanarepairservicecenter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b965c49-0b48-5fbd-a134-56bc1b5e649a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amanarepairsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amanarepairsupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--683af1b6-f71d-52a4-a79b-9a569ce0b1c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amanatrusthomes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amanatrusthomes.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--478e0718-239e-53e0-a8ea-1d75110dabf9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amandamassage.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amandamassage.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5b490f5-5b31-5bbe-9a62-d763a64402dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amandanunestattoo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amandanunestattoo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--419776cc-92cd-526c-b356-66bf0a2824ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amani-luxury-suites.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amani-luxury-suites.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6221fb8f-d438-5330-98fa-93521b240c83","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amaniluxurysuites.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amaniluxurysuites.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c189a2c-2361-5c19-870e-af2ab6ff387d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amanualkassa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amanualkassa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77905486-9118-5759-aae9-f11bdb4ecf49","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amanzar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amanzar.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7327f24f-95b1-50fa-be5d-8df7974dd8dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amanzella.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amanzella.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc3033b1-4ec6-542b-8d43-903afcce341b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amanzlgranite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amanzlgranite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--705057f1-29ca-5175-aa0c-36f7b61cf2a9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amanzon.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amanzon.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42dcb024-55c5-542b-90b6-4557a0c5451b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amanzuzacashloans.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amanzuzacashloans.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feff2c0b-e5aa-5bdd-90fc-3b788c27d5d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amaratrust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amaratrust.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--713ffea8-ff48-5a0e-b406-e6af4f31113b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amaricanfidelity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amaricanfidelity.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--946f5787-9e56-59bc-ad4a-3c5dd7901e4e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amarrecelestial.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amarrecelestial.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2c8602-1a51-5267-b38a-e97cd3fe9bd2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amarreenlinea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amarreenlinea.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12238193-8e60-56f8-b54e-dd22021a19b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amassavzla.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amassavzla.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a68dd875-ac8b-56ba-8007-dc30955871ea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amassstore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amassstore.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f25c407a-ff1e-559a-8542-30da35ad7f8d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amassuinso.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amassuinso.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33e5a151-cd65-5001-99fe-af3631452f3e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amateurcamvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amateurcamvault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6196f8b1-9e48-59dd-9d23-ae32981304b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amateurscamvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amateurscamvault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27c06c30-2f42-5169-b473-58904dee8f72","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amateursfirst.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amateursfirst.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf39a5c7-6829-5a82-87c6-139ec36abea1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amatonationwide.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amatonationwide.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f31d5bd5-4736-513f-b7e2-13dd51f43c33","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amattingly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amattingly.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f575f11b-57e2-5494-8cd9-4caa4270c8e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amattoto.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amattoto.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39fe0bc9-6284-5055-9151-674154031b2a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amattr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amattr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba54246d-0478-50d5-9f53-89ed7a1efd4c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazing-claim-giveaway-instantwin.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazing-claim-giveaway-instantwin.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4127669-d5e9-567f-b907-a424618abe1e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazing-claim-specialoffer-giving.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazing-claim-specialoffer-giving.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc92cbe0-bb72-54c0-a181-805b8a404708","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazingbigwininstantwinclaim.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazingbigwininstantwinclaim.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3dafe64-b1a7-5fbf-b4af-4416551cfb10","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazingclaimgiveawayinstant.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazingclaimgiveawayinstant.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cad8acf-49c3-59b0-93e1-ac5b5f848459","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazingclaimgiveawayinstantwin.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazingclaimgiveawayinstantwin.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c48fb3ce-3a5c-55e3-a1c9-ee06883335f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazingclaimspecialoffergiving.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazingclaimspecialoffergiving.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b83a1ae6-5d4b-5838-a61b-b5cf05125677","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazingcryptosecrets.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazingcryptosecrets.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0d5698d-73c2-5732-a64e-75614b862497","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazingdiscovery.review","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazingdiscovery.review']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cadcf48f-4b80-5a60-826f-b7501947eca4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazingdiscovery.science","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazingdiscovery.science']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f935f2e-8f61-58b6-b564-708d721b7584","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazingessay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazingessay.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf26f49-be47-575c-b44a-37aadca53751","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazingfarmers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazingfarmers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0663f14-9a46-58b3-a952-225546950e10","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazingfreebitcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazingfreebitcoin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--671726b2-b1ff-55a2-8302-f10b4ffbd186","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazingly-secure-offers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazingly-secure-offers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35b32e5b-d89a-5619-a2aa-8fd0021d5188","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazinglysecure-offers.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazinglysecure-offers.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d1951e2-8e81-51a0-888c-3cc362d5e4f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazingsearchclaimweekly.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazingsearchclaimweekly.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f42b5c3-a7bc-56cf-a27f-91f05ec54eaf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazingtanzaniatours.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazingtanzaniatours.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--763d638f-02b4-5b1a-a214-7f33db5c9908","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazingtriplebay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazingtriplebay.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ca31ce1-7108-5b07-9ace-d659dac568e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazingweb3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazingweb3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93d73e84-7fda-5298-bd72-b68842ebef98","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazirshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazirshop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d0548ed-d3ce-512f-a9ba-685399df2184","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazom-update.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazom-update.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--392f9da5-ea8d-557f-bf47-c1cd1df5e5fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazomupdate.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazomupdate.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97d6a16e-da23-5190-9586-3443982153c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazomupdates.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazomupdates.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1204cd8-752a-53ad-8f1f-9d582ca3309f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon--bot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon--bot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8ec5249-90ba-57b5-beab-27b9c46a0e4e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-act.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-act.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcdfd8eb-ad4c-5e38-a38f-aacd15301588","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-after.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-after.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a847f522-d473-5c51-8c12-4b2d093629e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-after.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-after.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e80c30c1-5eec-54b7-8826-71b0c7ae2ef1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-amao.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-amao.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d28243e8-5b7a-5c2b-9e1b-70d254775cf4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-angmokio.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-angmokio.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c86e5ed-6698-5df1-940a-22d9129920cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-au.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-au.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--834e40a8-32c3-5eda-a467-8f9f2af8ac64","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-au.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-au.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b3d0def-fdcf-5144-93b8-4f2b91b4dae4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-aws-ec2.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-aws-ec2.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97060281-bf00-5d77-b17d-5b4d1047a215","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-blqzenu.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-blqzenu.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e75bfa1-b351-5dc6-8172-a485fdda8e25","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-br-promocao-xxo.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-br-promocao-xxo.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c2b746d-de7c-5c25-8ec5-7d8328ee455f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-br-promocao-zhk.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-br-promocao-zhk.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb39b3be-e129-517c-832e-490faeeef8a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-ca.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-ca.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d9dcf47-8be1-5f66-b27c-366312b41501","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-canceltransaction.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-canceltransaction.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3200fc51-8035-57da-b906-03b97b1c8bc5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-canceltransaction.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-canceltransaction.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd61c6e2-d942-5353-9fc6-be0fe9c7a491","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-cdn.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-cdn.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0ead19f-b790-54eb-87de-71537a425a57","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-cn.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-cn.cloud']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--984d5b27-3f13-5a2a-9a7b-3c26f28feb64","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-co-jp-security-verify.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-co-jp-security-verify.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a132bc06-10c2-5f6d-bd6f-250987d92286","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-co-jp.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-co-jp.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ba6ff7d-2992-5296-8a13-53cf3807e4c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-co-jp.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-co-jp.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79b0004f-4d17-510e-b154-7a6588e8c781","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-co-uk.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-co-uk.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcb9e50d-465b-50aa-a46d-70d785a27095","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-co.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-co.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85c8e75c-ad0c-58f2-8a6b-2e9a5e861ce0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-compte.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-compte.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3656a005-16df-5780-9a48-4d27d8192207","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-compte.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-compte.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--433c7a4a-c902-5f6f-ac46-a2c16cfa2586","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-customer.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-customer.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f36b1f68-352a-5f9f-b41e-6e8191ea2654","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-customer.support","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-customer.support']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e62507a9-a281-5e45-bf47-ee672fca0b26","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-drive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-drive.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc60d6c-3425-5e0d-9d5c-7bb716183675","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-dsvasdasvtrnbhfgh.homes","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-dsvasdasvtrnbhfgh.homes']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db226345-dcc5-516c-ae45-15a3244e3800","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-express.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-express.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b7678b-493f-5707-888d-085189e2ca88","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-express.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-express.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06e12065-d65a-53f3-a8e7-f9ba8c419bf1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-express.homes","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-express.homes']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93a8e294-c060-5bf0-89ba-b31147584373","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-express.skin","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-express.skin']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47370f29-9cb9-543d-829e-02010a32a174","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-express.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-express.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7df6702e-1cc3-5f1f-a51b-03db6bc96ecd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-fba-and-marketplace-training-jtm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-fba-and-marketplace-training-jtm.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49f4326-b378-5385-8c65-30bf7552f73b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-fba-and-marketplace-training-jvd.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-fba-and-marketplace-training-jvd.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef12c35b-e000-519b-864c-4cbdba06aa2f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-fba-and-marketplace-training-men.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-fba-and-marketplace-training-men.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9458c2e7-4d51-5363-9355-eddb2fdd3962","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-fba-and-marketplace-training-pmw.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-fba-and-marketplace-training-pmw.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04be16ed-f897-5de4-a906-8a901a0ea4b7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-flashsalealert.website","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-flashsalealert.website']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2dec42b-4c71-5090-8368-78982378f960","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-funder.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-funder.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2260d41b-9b53-5641-a63d-99bb69285ad7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-gamez.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-gamez.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9af1e1f-35d0-5bf6-9d6f-5ad20756bc25","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-gh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-gh.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6f82f82-2c0b-5891-8f8b-79172dae2935","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-gift-card.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-gift-card.one']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--473d4dde-9e00-502d-978d-de40816aaf46","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-gift-cards.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-gift-cards.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb3d141a-9434-5233-896e-120c69469f2d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-globalnetwork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-globalnetwork.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cf8b531-0b55-55ef-8e20-4a996030e530","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-globe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-globe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e61a33bd-19bc-5ae6-aad0-510a69983eee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-grocery.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-grocery.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--175e72a8-27b6-5466-bd12-7f23c7e004f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-healthcare.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-healthcare.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d850d294-a8fe-58d2-9ae7-7ccac7c8e00c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-help.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-help.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b457cc0-6b0a-5e37-b1ab-d2549b3280f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-hq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-hq.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b34250d-9d7a-5b74-a16d-bad60e347a9b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-ic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-ic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a57c9ce-2b60-5265-8f94-f913e7349c5b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-ident.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-ident.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91993cbd-d7e2-58d6-b356-cc7f2a26cdf2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-in.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-in.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad373b9a-9d15-5ff1-9381-6e44c6b82531","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-intl.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-intl.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e58046fc-b288-55d2-a477-bbf30b614d39","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-japanserve.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-japanserve.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b40b70b-9f3a-5f80-904b-a3f0921c5c60","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-jp.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-jp.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd188de8-4d2e-5eda-b555-a0aa3d7a3717","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-jp.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-jp.cloud']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e026d211-3772-5d4b-97eb-78c983b83bb7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-jp.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-jp.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00c8be66-831c-5515-b96a-f837f21f1449","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-kardon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-kardon.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a783a7a1-b9c7-55d9-8320-b8e678e078b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-king.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-king.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--668d6112-1a2d-578c-be0c-2f172bc401eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-loyalty-agreement.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-loyalty-agreement.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--192e7b54-4e99-5bb1-ade2-ab960ed55102","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-mex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-mex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5276a2bc-122c-5b5c-89da-351cbcf253a3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-monjaro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-monjaro.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a84c9a3-2d43-524a-8f18-8f8d1b7d0381","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-mx-post.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-mx-post.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07089493-5523-5f42-aa9a-49ccf0dd1be6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-mx.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-mx.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e701c072-f694-5bed-bd54-4df6fd717d96","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-nederland-deals-zsu.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-nederland-deals-zsu.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a014ba5f-0e31-5202-8c05-b4d74bccb09e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-nz.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-nz.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05f1111c-f730-5fb9-8dca-06820e08069b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-ofertas-hoy-cjo.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-ofertas-hoy-cjo.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec50247c-5f85-58e5-ace9-3b728fd4d0ae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-order5646.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-order5646.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3b422be-aeb4-55cc-bd79-0994d04bdb6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-outdoor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-outdoor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f168ee0-8876-5f51-8202-3526e6573fb3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-plumbing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-plumbing.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d90125a3-b31a-5295-853d-c7b903b52b51","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-prime.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-prime.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc325e55-0ea8-590d-b1ef-7d01b58ee940","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-prodcts.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-prodcts.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--109c1240-3c66-5cda-92e5-52bad371ec4d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-ptcoduact.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-ptcoduact.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12142499-0387-55e0-b363-88d5ad9de290","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-ptoduact.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-ptoduact.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de26c9a3-179b-5444-b873-bada9c6ac166","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-ptoduacts.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-ptoduacts.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc95e2b-ae9c-570d-8245-24acee1377bb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-reset.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-reset.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--680f31e1-b408-5fff-b332-fd566d40c111","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-retour-nl-tlg.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-retour-nl-tlg.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f70366cf-2473-5026-b082-a2990d0ace3a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-safety.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-safety.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--759d0a66-e5c3-53e3-b00c-64b864528d56","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-sale.store","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-sale.store']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66cdbe3f-0c38-582c-bf99-0e751231af96","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-sconti-oggi-edh.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-sconti-oggi-edh.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f5eda83-eac5-55cb-b457-7c0571e9d245","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-se.homes","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-se.homes']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ddcb57c-c622-56e0-b87c-38551d7687d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-seller-account.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-seller-account.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--745d955b-a230-5164-9ca8-800c3f85425a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-seller-central-login.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-seller-central-login.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ecd0718-6bf4-573d-8fb0-2748970f9ea2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-seller-program.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-seller-program.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--947ccc0f-08c0-5938-9282-f2a84c38e54d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-serve.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-serve.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ce87a99-f992-5b52-a589-0f8c41aa2046","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-service.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-service.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b4ca33c-aad7-5dcb-825a-de08016296c4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-servicess.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-servicess.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe13fbc8-f8ce-5a54-98ad-a92968a81355","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-shop.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-shop.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f446e0c5-4d32-532a-930c-6aa134219e63","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-shopp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-shopp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e1c7729-01d4-5972-b9a5-06f1456edef4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-slots.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-slots.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90d1aa38-8e43-5d10-a6da-a629a05e883e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-slots.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-slots.win']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a61445fb-ba4a-522e-8cc8-fd4658bfacb3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-spend-less-smile-more.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-spend-less-smile-more.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7db48c5d-2175-5d50-a402-b8a1d3985c82","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-ss.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-ss.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fde43edf-8fb2-5269-9ca3-5c5414c91b08","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-storage-department.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-storage-department.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f543afbe-cc9b-514c-8d79-09ce012a0fc0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-storagedepartment.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-storagedepartment.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bec731aa-da6b-554a-b332-6c6ea536a76b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-support-accounts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-support-accounts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fa0c40d-f38b-55ed-85ba-0b4cab220e1b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-top-coupon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-top-coupon.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--365fd7a7-b825-5121-9bf9-a983ba7763e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-trips.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-trips.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec60ae64-10fe-5786-b121-7390156b4882","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-truck.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-truck.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6700d18b-efa3-5003-b594-1ac63822b3a6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-update.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-update.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c73804bc-1d00-54e3-96c3-af5ace6192fe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-verifizieren.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-verifizieren.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6242985e-f6ef-5886-8824-ad276280c19a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon-wxcbudhuwdijdg.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-wxcbudhuwdijdg.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d5ff14f-fda7-5df7-859a-acc6c1e3815b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon000.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon000.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--936c6138-ca5e-5a66-bcf9-bea60408be41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon02atonline35.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon02atonline35.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00bdd80f-e314-52b0-9ecd-d81226fd9100","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon02atonline36.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon02atonline36.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9de1d2ba-c821-5f4c-8cc2-6d3651359a9e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon02atonline39.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon02atonline39.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0f0a039-396b-5746-9ce5-c3f9c4711c28","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon02atonline45.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon02atonline45.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54618ce7-5e58-5b25-b418-b3d000f5a013","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon02atonline46.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon02atonline46.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e417e8b-662e-5bb4-aec3-cddfaa508501","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon02atonline49.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon02atonline49.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dc6960e-28fe-50fc-82f2-6c6e2797c523","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon02atonline56.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon02atonline56.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--605975d7-6052-53d8-8bae-f963c5d9805a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon02atonline75.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon02atonline75.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9bf66f1-cbf4-5011-941e-c4143166b484","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon02atonline76.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon02atonline76.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56639be1-0d76-5a2f-bcb9-3480a783a8b8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon02atonline85.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon02atonline85.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f74145e1-4f03-5795-abaf-897d9287b297","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon02atonline86.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon02atonline86.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2333fcfc-e467-5dfd-9953-9d6144179f92","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon02atonline93.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon02atonline93.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--364ab3f7-f65a-56cc-b37b-8a13bcb2a0fe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon02atonline95.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon02atonline95.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32c4df5f-1421-5df1-b943-94353017ac6e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon02atonline96.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon02atonline96.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--160046b7-8897-5201-8049-319d01478142","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon03atonline38.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon03atonline38.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8b2f490-f85d-5367-84b6-114ce20da348","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon03atonline65.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon03atonline65.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75764557-0a7f-5c62-bc7d-769187a92097","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon03atonline68.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon03atonline68.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0780646e-c0b5-59e3-88cf-227eeeeada2f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon03atonline75.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon03atonline75.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c182ad6-eef3-5f8d-945a-572fb5bde3cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon11.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon11.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f00d7ff-b7f8-5b18-a746-bb0bf605486c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon123.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon123.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--547ce4b1-272b-540e-b258-d9b3348146fe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon138.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon138.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea4bf67f-1ce4-5091-baa8-809f3ce25cc0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon138.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon138.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef4719ab-3930-5e3b-ac75-0f13ba5d7278","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon138.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon138.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d0e80fb-c654-5030-b0c7-f9bceed72e87","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon168.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon168.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a5730e4-8d5d-5e3d-8330-76855f15337c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon188.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon188.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e027bc0b-fd19-559c-8c33-9782154dbd18","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon188.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon188.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48b8a361-7f3f-56d6-b712-7aa5f0b91041","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon22.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon22.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--681f6ad9-efa8-571b-8dbe-7a8c7cd96a37","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon22.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon22.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f491c674-df5f-5968-b5a5-039d0269cbf0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon27.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon27.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5038ff2e-96a9-5271-afe4-2d4b865de52e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon27.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon27.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55e9c3e7-4fc0-53cb-9493-7527113799a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon3000.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon3000.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbd43059-949e-5553-a25a-81c06a6a55ef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon3000.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon3000.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1178e92d-c63a-5a26-85c3-43a3a8a20689","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon321.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon321.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--001e1b8c-eff7-599e-98d0-e4dbc70864fe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon33.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon33.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a44d2b27-7499-556f-b370-2353c729ed3d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon33.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon33.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bee40b3-d4b5-5e21-8b88-69cac0bfbc32","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon333.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon333.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72efc927-e49e-548d-b701-54441ae6c7d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon333.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon333.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a991e735-f7e8-588e-b1ef-bb03a0ebeaa5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon3a.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon3a.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1de2613b-adea-5f50-8740-8dfeb5bbed5c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon4728.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon4728.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07174d4a-8e62-567a-bb8d-cc89292b4008","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon4d.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon4d.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee7c3a6e-64d1-5810-b443-5eba9d11c975","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon4d.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon4d.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b624470f-99d4-5bbc-887c-ec41c7857305","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon55.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon55.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76e1e9d2-5fda-5e6d-a3cb-83fae9620f5f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon69.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon69.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b90ab575-5112-52b7-bac0-3aa67b56f6f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon69link.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon69link.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8343d15-c7e2-574a-94da-618d5769e57f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon729.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon729.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ed2c9e6-addc-5e9c-b3c6-6498f0bc5115","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon77.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon77.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--719ce48e-f28a-5edd-8574-f583f306ce52","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon777.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon777.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3585f5a6-e41e-5f04-a10d-ab43048fbafd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon777slot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon777slot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b85ef2c-0015-58d4-ae8e-784a57973fef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon7799.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon7799.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0ff207a-8ded-563d-b7b3-a99a0084b578","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon8088.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon8088.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba35dcae-c76e-5839-aae8-65d9daf0a5ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon888.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon888.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15c7f71a-f4f0-5732-90ab-d11718a67541","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon88slot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon88slot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4426bed-8a1c-5b74-accf-71d227ddf4ed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon88slot.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon88slot.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01619763-fd23-5b64-ad75-9dade57f9633","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon89.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon89.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ea5b3ea-7cd9-551d-a544-0196cc97910b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon89.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon89.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a398005a-3c74-55fe-b47b-0fb85ed9174c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon9088.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon9088.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3351e7e4-f024-58d9-a355-03321c02e8b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon989.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon989.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ae74ffe-ee0f-5ec3-bbc1-9c0c196aa36b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon99.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon99.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33d0476b-0048-5c75-a499-95d9c19b6ba4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazon999.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon999.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7ccdcd3-cc37-53c2-b980-c961f443d176","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonaccount.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonaccount.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71592c19-9c3d-58ed-9803-0000ef1b9de2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonadsmanagement.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonadsmanagement.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14904dbb-e2ee-51c6-884d-7853a0921e8b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonaffiliatebuilderpro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonaffiliatebuilderpro.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91b2e281-fbbb-5f62-8fef-4e320f0d1b88","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonafter-login.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonafter-login.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80a37003-41e6-520f-8439-c4198eb83ed3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonafter-login.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonafter-login.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b911a24-7eb0-5aea-8f85-5e3720bc3e09","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonafter-logins.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonafter-logins.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--344d041e-fa60-5455-bf98-46cf123a8cfa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonafter-logins.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonafter-logins.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d67a7023-1a86-5565-a1ba-2a0db2b0d32e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonafter.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonafter.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b989308b-a1ec-53d7-baf3-63c52cec17c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonafter.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonafter.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44d13bd3-68bf-55d0-b8ee-08b27a1bb463","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonainvest.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonainvest.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84235b72-ec8d-5ba4-94f5-d626718c8a21","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonais.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonais.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe00083b-d96a-5084-a3f0-4a14c9681a68","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonakaunto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonakaunto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91288703-880d-5e7c-8316-0b8fd9432807","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonalert.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonalert.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d926a47a-f191-5497-bb89-97ee81cd4408","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonalexatip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonalexatip.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7c4a923-0056-5866-ba75-e230c467f6ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonalyze.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonalyze.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2fa959b-930b-5e20-baa0-1e41b98cfd82","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonam.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonam.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0811afe5-a4ae-52dc-a656-0cb1f51df353","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonamm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonamm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44af966e-15c5-5403-889f-5e98b21c0196","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonanews.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonanews.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1c2cf7b-eb06-5d7f-8108-e5a9c310701f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonanimalcams.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonanimalcams.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--347e6568-c57c-52fd-bc95-51fc849d75fe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonarticle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonarticle.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ef1615a-7242-57a0-b55c-707bbf2b7f34","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonas.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonas.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7b5de43-2d81-5f9c-820b-39bac4e7e942","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonas.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonas.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6ed23e6-e82d-5612-bf74-e82e8687ace3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonasnews.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonasnews.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dde75c4e-1311-5868-bc52-c23be37879ac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonaspcs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonaspcs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f6828a4-a8f8-5ed9-a39a-812abda1340a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonasplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonasplay.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2dfa278-df81-54d3-84ab-1f2a2ce5a782","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonassist.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonassist.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdc6d2d2-646c-5e84-b1f1-839a676e97bb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonassporttv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonassporttv.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--807a40cf-750c-565a-86ff-c42c8545b004","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonatrade.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonatrade.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba0ee67-aaa3-5751-a907-4a534932ea33","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonauthentication.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonauthentication.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fca863c-17cf-5179-be6d-81a6e60a5c52","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonauthenticator.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonauthenticator.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--035308e4-d251-50a4-8bcd-8f0321f20943","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonautomatic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonautomatic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2564fa6b-c879-5f1d-a9cb-c2529a48e484","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonautomationpro.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonautomationpro.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c8d2d14-5003-55c5-aa33-9536f42d8d91","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonawsapirds.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonawsapirds.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04e353c5-43f8-527f-ba10-373a585279b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonawss.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonawss.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--433d6396-e7d2-57ea-9080-d1a8172c98ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonbage.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonbage.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f95622ab-7d48-5f2c-8c19-81b661094fb5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonbilling.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonbilling.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--144d23d0-0885-53e2-8b0b-9fa4cfcba35a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonbiolabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonbiolabs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bb18541-5cf5-5994-a33c-2fa42e2b97e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonbiosciences.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonbiosciences.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5993fcc4-712d-587e-9127-b10ecd7a7c4f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonbioscientific.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonbioscientific.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b61a3ac8-79c1-5165-b6b6-99c5741b524e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonblock.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonblock.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0d0c833-a775-58cc-a02b-7071b2cc40d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonbookkeeping.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonbookkeeping.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4828d3c4-a92a-5dd7-be87-9df0e8abf5dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonbooksbd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonbooksbd.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaacefcf-697e-58f2-8ca4-373fc3f11c88","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonbookshopbd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonbookshopbd.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2af8031-c9a1-5b56-81a8-8cc82371041c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonboost-mark.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonboost-mark.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cc01f09-c6c3-5fef-8f09-54db850858ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonbrd.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonbrd.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a8c4252-3e74-5831-a1c0-b765865cff2f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonbreach.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonbreach.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f8cfe80-13b8-59da-941a-b136813a8a43","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonbulkliquidationexpress.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonbulkliquidationexpress.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e4de74c-8aec-54d0-99ca-8737cd3f1cc9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonbuy1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonbuy1.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40b123a2-2088-5797-bc98-7a75e00ac775","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonca-vqjpl.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonca-vqjpl.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f2973eb-4c54-52b6-8068-adddc53d771e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncaa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncaa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331b7b8c-5449-5aa1-8310-665253247f9b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncac.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncac.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc192856-ca3f-5b22-9118-e0c9cd06e668","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncad.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--183fcf38-14ec-5ef4-8fb7-3128afe31abf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncaf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncaf.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--319e5e98-db04-58e7-9292-2639d7dcbc76","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncag.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncag.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5968b63-72a3-5343-afaf-27e7c69254d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncah.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncah.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a80e71f-c656-506b-841a-f4285ae668d2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncai.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97ae005c-75fa-5182-98ba-00d38e2126a9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncaj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncaj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0ed92e8-8474-5bc1-9b6b-93ad04160d0c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncak.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncak.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffb5ddf1-4c38-5877-ba4c-3a6bdf386b0b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncalladecorgifts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncalladecorgifts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9186a9a8-25bb-536e-a87f-9bbf1b9272cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncaptchaverify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncaptchaverify.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8711549d-b9ef-5681-a911-f59c756e88d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncard.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncard.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60e62a56-910d-59cc-8e4a-39c7b5cb2dd3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncareersteam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncareersteam.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2abecb85-6d77-564d-a172-d03c5548d70a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncareerteam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncareerteam.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c195c3b8-26f8-593c-9908-71c47b0840c6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncasino.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c1599a-1acd-50e2-830e-39222e8b9d04","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncaw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncaw.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6361dc4-4f61-511c-a694-f25a903faabd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncax.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--556b089d-62e8-5a44-b72f-c9b21f1fcb88","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncay.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--179c5803-4cd6-54a8-92f1-982f4255fc0c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncaz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncaz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aca6368-5066-5892-bad6-72bccda60fb3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncda.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncda.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aaa809d-685b-50b6-8e17-6f71148103ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncdb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncdb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72ef5238-754f-5637-8cd4-bfb398214b6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncdc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncdc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edc89c05-66d5-5b22-86c5-f227edbe26dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncde.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncde.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8388e521-9352-5013-bd18-2a6644edda7c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncdf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncdf.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cd35ff6-a720-5526-926b-d66185927f26","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncdg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncdg.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e474dbe-9d7d-57f5-9bc8-7ec2ffc3850e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncdh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncdh.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14fd2bfe-8770-5610-a77c-45e748eadf6c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncdi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncdi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fad03b9-ec37-5115-9af0-f0260be9de1e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncdj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncdj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7b19dbc-34b6-5519-93d6-a9ba62623cac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncdk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncdk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--102ae2dd-09c8-5b7f-97d6-3633938cbb74","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncdo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncdo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e274d669-d0c2-52ee-b08d-64bdf060bf39","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncdq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncdq.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--024cca05-e1d1-5be9-ae66-197d67549149","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncdr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncdr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a57e8cb-e6d3-5c10-8412-079b2df871a7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncdt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncdt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--800037ec-82a4-5951-be58-b9513a91b8f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncdu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncdu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46961c57-eb44-5a68-bf7d-4d6b0a6ea43a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncdw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncdw.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac18fc43-25e6-5607-b8fb-b6c451e0aead","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncdx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncdx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--295414ce-5518-521d-be94-d48edb20eb11","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncdy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncdy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d908b47d-707c-51e7-8ccc-19a99e74b91a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncea.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e40bd618-0472-53b8-b8c2-887c0e8255b7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonceb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonceb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcf006bf-0258-5d48-9393-cc99b0f6a764","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncec.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncec.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f312fc67-c776-5cca-8c1a-593df2534aae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonced.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonced.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b397c9fa-0ac4-5fda-a4fd-ac53770d50bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncee.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncee.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e3776aa-1cbb-5c90-b812-4f21121d97c6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncef.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncef.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93db1c5b-0dcc-5511-9a44-65000e995f5a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonceg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonceg.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9e7e0e6-1233-5e4e-ae18-8aa80d9e2fe9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonceh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonceh.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5607953-4250-579e-b529-51951aa32ab9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncei.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncei.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8f2f9e7-17f2-50d8-8271-3c522208985c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncej.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncej.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1c3bbdc-2ec1-569b-9ce0-d518ae82482b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncek.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncek.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ab595da-691f-5344-8915-1a249b17b637","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncel.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e6cf26a-8a68-575a-8e5c-7ae2e94a8c41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncem.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncem.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--592f3b67-f48e-5b91-a5a4-ac6e85e8f0cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9788acf-8e2d-52b2-8ba7-e8812a9a7312","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonces.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonces.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac4c9747-cb30-595f-8369-4950a0086b8c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncew.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncew.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fab3ef6-26f8-5681-972e-1f58b38fad5a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncfp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncfp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--caee6b3d-6b50-5a4a-8fa5-f1724ec18440","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncgy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncgy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3d09baa-30a5-5d76-bfaf-2e6c052328bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncharters.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncharters.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6c39fdd-9c71-5477-9bfd-f3af8e096222","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonche.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonche.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3b78861-2a4a-57dd-a482-190dad1a6d06","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonchik.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonchik.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1bdfe92-233c-51b6-8dca-426f5332c3e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonchocolatesforall.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonchocolatesforall.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00850769-1e2a-525d-8daf-225fb00f3ccb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncig.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncig.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ddf4e0f-6fa8-52f8-9107-54a19950efb5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncih.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncih.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--302a8786-e4c2-5fd2-ab12-f153d19a1cf7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncii.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncii.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb3f9ad2-3917-519a-9685-e301639f2ac1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncij.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncij.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98255fcf-6d18-51cb-9b69-4466fe6a8191","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncik.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncik.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90debd5b-e759-5626-aefb-dfef285aaa9a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncil.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5e84922-c2b0-5be1-9ffd-251b724fa2b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncim.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07b6a631-d39d-5a8b-a88a-55d132de64f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4550da02-f51b-511e-b778-71ab52084ecb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncip.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da319868-ed24-583b-96c6-2ae0abe499fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonciq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonciq.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7007bee-4ea1-5634-b17a-d8bb92585bcf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncirculareconomy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncirculareconomy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c68d045-6ad0-5542-b350-a67b9dab56c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncirculareconomy.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncirculareconomy.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e70caf83-78cc-5c16-a216-3c8898a6dd5f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncld.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncld.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--926d29b6-43df-56e2-9c80-5aed4287f4e1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonclimate.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonclimate.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab5d3132-e041-5402-a727-422d6ed18c1e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonclimatehub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonclimatehub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0d88145-6987-5385-9532-2ddbed53c466","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonclimatehub.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonclimatehub.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9be30c7b-2b3a-529f-a80a-f2b08be53b05","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonclip.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonclip.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ada7021-8ef1-5713-a0b6-cf0882fc9556","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncln.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncln.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1113cce3-750c-5af4-80e5-73e8e3e4a188","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncloud88.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncloud88.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e706af5d-dc7c-5f02-b24e-a5087f2344f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncloudservice.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncloudservice.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a395c59-8dee-58ee-bb74-4402c4c66df3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonclubhotsale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonclubhotsale.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce126a67-0abf-52c7-92b1-8894afe64df7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncms.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f2c3e3d-c6a5-5ffc-aa9d-46c6aa4d69ba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncn.blog","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncn.blog']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79a453dc-a727-5141-9746-2bbbd05a789d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncn.monster","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncn.monster']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1910ce2-a10b-58af-9d0b-5f61d44c904a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncncb.monster","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncncb.monster']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69fca65f-a651-5f65-aed0-941c26bd7d85","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncnn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncnn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f2a6f51-1a54-57aa-96cb-1ce97d35a483","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonco.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonco.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97140d50-ff4b-5e1c-b463-d5bfe3aa7914","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonco.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonco.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acef7b35-703e-5e1e-802a-879bee073779","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncog.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncog.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09c0cb7f-3ee0-541b-a391-f6b14dde6367","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncojp.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncojp.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce57470-7048-506a-89b9-d841396808d2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncommytvs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncommytvs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5847e8a0-0e41-5baf-ae0b-4462cad66de8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonconfirm.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonconfirm.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a691089b-48a7-595e-9d96-52306b562368","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncontroll.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncontroll.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd317abd-eaed-50fa-a4bd-0dec3ed23f2a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a7f01b3-93d6-533a-b032-2704b7ce8163","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98871697-a74d-563c-a7ea-8e9cb78db8fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncouk.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncouk.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e3adbd4-6c93-5998-b82b-1c084665a7cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncouk.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncouk.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c0f8af5-fd63-5b1a-8e52-8c41db21d10f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncouk.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncouk.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1058b2e-a9f7-529d-b19d-42cef55e2ebb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncounselingcentre.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncounselingcentre.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8bfe430-858b-5047-b94c-5d2d9c4c570e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncpp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncpp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f0b7b1-5a90-5311-a530-2e44deeb29de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncpw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncpw.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aca7fb65-51a8-5450-b71e-09ef56606b21","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncpy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncpy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db54713d-7655-5ec0-8345-11a20c4b2ef7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncra.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncra.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09b5c183-e629-53e8-a01b-883f8090f1fb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncrb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncrb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd3064f3-8b21-5939-8198-870829854e8c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncrc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncrc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--685ea5cc-a873-55a8-9cd1-1450bb2bc922","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncrd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncrd.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07598276-136a-56bd-8c46-89010bfd2022","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncredithelp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncredithelp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a433971-d4e8-5c59-93bc-bd3144405091","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncrf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncrf.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--460bbbd6-d2bd-5746-aa80-71d9b1c9c7ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncrg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncrg.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc9e7fcf-c9fa-56b2-bc33-8d91a42f1654","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncrh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncrh.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28beeb95-5445-5f64-afca-ee78d376703c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncri.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncri.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00485603-3d7e-549c-83bb-73b4ffab11b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncrj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncrj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc2f7fec-e282-5102-96b8-072b3d64f643","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncrn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncrn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c1051ec-8f97-55a9-b9d8-66d5c682cf6d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncro.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbdad63d-ea83-561e-a909-6186c39ee24e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncrp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncrp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fe0de82-8f51-540b-a6b7-684d1c5e09d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncrq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncrq.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04d380d1-2ca9-55da-892b-f68ae1f88f84","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncrr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncrr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ec1a26d-0429-58d7-a24c-dd2356506a34","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncrs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncrs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abc8d39e-206a-502e-ac47-54a25c7df47b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncrt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncrt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90a654b1-b9fb-5791-b9ea-5f3663e855e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncru.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncru.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50e475e0-3d54-51b7-aaf7-21cdcb76bf82","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncrw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncrw.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6b21e9e-6e2d-5abb-a605-75b5c3b0eeba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncrx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncrx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f170a1e-ea4e-5b04-94af-1cfe40831926","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncry.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncry.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b1d9617-c86d-5161-acc0-d352cf232932","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncsb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncsb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44eeb9be-c56a-5c8b-83cc-866688a47b87","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncsc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncsc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--327b59b0-d39c-5e4a-84d5-2999c6f5f4c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncse.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e2a04da-7ae0-58a4-b9c1-74731ba15aaa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncsg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncsg.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e785e87-9349-50e2-8e5c-d095c77026cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncta.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9129cb30-ceb3-5ef8-a213-440c26d2a350","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonctb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonctb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a56ccce-91c3-5332-a239-364c839db08b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncte.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncte.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e72bcd7-eb5c-5ff0-8654-6e1e3cbafb81","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonctf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonctf.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da9e4de0-65ba-513e-b9bf-c734fc3675cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonctg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonctg.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b384a011-5adf-5613-b186-6f1df5ff6efe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncth.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22fec440-acb7-5fad-bec0-3b6a243a8034","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonctl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonctl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60280cf3-d39d-5080-8193-fd2333cd8390","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonctm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonctm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf9330b-8beb-55ff-996c-884e56801e7c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonctn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonctn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdf80724-2000-57d2-b151-dee2623f0ba7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66e744bf-410b-56b3-a044-1d89e6bc483c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonctq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonctq.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c1c9ccc-03bb-579c-92ed-6823b8b4cf57","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cf5be86-566c-5be1-8e49-c7cebb1f0efd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonctt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonctt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a49cc11b-d4db-5e04-b4bb-66a5fe4fe729","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonctu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonctu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d930d992-750f-5570-a586-a9d25edc1aae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonctx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonctx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64e70e9f-0bc7-56cb-a673-c9a5cdf59289","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncty.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncty.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b7c9735-cf42-58f9-952a-930a2c0cec9f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonctz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonctz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--639552ab-68d2-5a16-8c59-222fd9d270b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncuu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncuu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--137ffc17-a75c-57a0-9b25-a441a35483d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncuxdiscount.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncuxdiscount.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f1579f2-4666-55af-8778-3d48c918da47","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncve.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncve.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66020fde-c22b-5268-af88-727321536992","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncvf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncvf.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec41380b-e013-5140-bfe3-ebe792ceabc3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncvh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncvh.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76da50aa-b2f5-5814-b9fc-7aa1abb17c39","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncvi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncvi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3bd7549-59af-51a9-ac0a-02f57ad24020","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncvj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncvj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--477c8b1b-a9fd-578c-9481-89eb5431296b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncvk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncvk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f72b666c-99d2-5712-be56-25fbfb2c4140","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncvl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncvl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba71f9f-146b-50e6-9d5f-04baad2397f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncvm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncvm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--943c5efd-03c5-532f-85f1-97bcff5a9673","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncvn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncvn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc8ed082-ed4c-56fd-b0b7-5b3733e4bc80","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncvo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncvo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--139cd94a-62c8-5d8e-8a9e-4492aa65fbd9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncvp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncvp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b63bbdb1-e00f-51fb-bfb1-2b600aa020cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncvq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncvq.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fa261db-a8d2-59d4-baa4-44822fdd78b8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncvs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncvs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b83d8165-39ac-55c5-bd31-c0c74ed93bc4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncvt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncvt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56837524-f1b7-5c94-a96f-3f4c68e9e95b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncvu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncvu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f0e839b-c792-5c3a-980d-372f56a9c9cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncvv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncvv.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe29d796-cde0-5b56-bdb9-cef1ced029a5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncvw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncvw.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6acad684-3b99-52fa-a2f4-5a5d92cd7314","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncvx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncvx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55b7307b-63c4-5590-862e-e00d1ca7775e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncvy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncvy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff7b39ed-3213-54bd-a425-a4063e25c226","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncvz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncvz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23480151-2e25-5834-8d8e-0506365cdef3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c93e1e8a-0198-534d-928c-6af02aecd0d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3defa2b0-e82a-5737-aa9f-4b21d03ac75a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6404f150-bf2f-53b2-b690-6c8d9fd9edef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwd.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99d9a45f-208b-50f0-9654-82dd48335ff0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d225f00-cf7d-5589-b8e0-ce05c84ae407","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwf.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2af4ece8-7694-5f4e-a2b1-0f208a0af45a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwg.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d257e577-51c5-546b-b334-6a4dc75b438b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwh.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76551a9d-8da2-59ca-b041-99b8f3499266","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--961cd868-e92a-5a94-9f04-32408efdb156","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14c34f50-9efa-5ad6-9c4e-ad1c10b258eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74208936-af50-5787-90cd-4f1cd7cde52c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28ce5ca8-8aed-5fe9-b9fe-cd19d07bf8b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68152001-13bd-5510-a513-ce13ff0d59e1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1274800c-37b0-5037-961d-06397acdc542","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28ca923e-23e4-5391-9d5e-c1827d8da0a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9033580b-2939-53bc-ad33-0ff61d42acc7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwq.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2370d032-7a3a-5d8d-bb65-ab813fbfbd12","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--206ac8ee-96f9-5b83-8354-decfeb17856f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--741e4e5a-8825-50ea-8c79-78c105e35391","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1047c15-e2e3-50f7-89b0-680347e2741f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwv.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82cbeee1-7233-52f3-b7ed-be2f57b49d96","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncww.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncww.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfe0d595-9344-5dee-93b5-f59675b3c810","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwwu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwwu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5705b8aa-87b2-5e0c-ad09-b97489cf466a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a655af5-93c0-58ac-b47e-aac43bc0d6aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--292b75c4-ad77-5cb7-a152-d95f11f58811","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncwz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncwz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6e6c1af-4600-5b8e-9384-64fbaee5e41f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncza.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncza.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64af2525-31ad-58ff-ad1f-97d16693d126","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf9985fb-b77f-565a-a70f-908b31808973","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74e88575-cd6d-5239-8f6e-8d478cefa15d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczd.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d245ae-65ef-5fc3-a960-7d4679760ce2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoncze.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncze.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63a3dd81-cd64-577f-b5d0-db66904ccfc3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczf.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--032eeb94-4094-580d-bf9a-72a65ad88ba5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczg.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e83746c0-d7fd-579d-85c6-4d2d8c5b3d94","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczh.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3412b329-4581-5d56-b26f-e79cdfbf4694","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83057841-7b37-5099-b738-8ed9f31fcb89","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b86455b7-7865-5918-99aa-25c941b87083","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--525483fe-a016-53f8-9e84-454bb9f4e1a3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f231879-4633-58d2-8b3a-cb2da8d3146f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0498bd4d-91b0-5b30-855d-3cdabc194959","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38fb1702-1b15-53c0-bdc7-f66fa453f923","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d6be832-0a46-5053-a10c-d8e50b40c4aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7c80745-8833-5867-99f4-71433456b81a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczq.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad4ed6c2-1bcd-5e07-9a34-9a508856a0ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3f9a634-f91f-520a-abb7-54f265313cc8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e83d091f-b59a-5d2e-a738-d5a44cc149cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2e00686-cfce-5025-822a-92b45017b0ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bdecd7c-20c0-5230-b767-38a9f04897ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczv.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724a6d6b-db71-5c28-be8b-a354963d498d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczw.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2425f13-f840-52b0-8955-a7678de3db53","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10cef5fa-f025-50ec-8a09-39d66b4802fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3a596c4-d93c-57bb-8cf3-7c3c41017644","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonczz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonczz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f81e5382-1d27-5e64-90b8-0c2de7ef9ce9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonddf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonddf.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--723939ed-bf60-517d-bd44-66c0535b209b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazondiamondpainting.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazondiamondpainting.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00e9df63-cd1d-5417-9d48-3df60d850f65","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazondirectmarket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazondirectmarket.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8828fe3f-27ca-59bb-89ea-e3d16830346e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazondirectshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazondirectshop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12a5b667-9b7d-58a8-b78a-0de207d4943d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazondjf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazondjf.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--547b5761-d5a6-508c-950a-5dbd7606a643","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazondlc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazondlc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--551914ff-6d99-59cc-af6c-dfd10923beeb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazondobes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazondobes.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a814f5b1-d687-5f04-bf1e-b472991a04e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazondropshippingmianchannu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazondropshippingmianchannu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a412e15-10e1-5623-90f5-da681a496257","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazone-tibesti.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazone-tibesti.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af2a58b3-58e9-5a81-90e5-8088b35c9985","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazone-trade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazone-trade.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--740936e2-82ed-52a5-be76-285cd8823276","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazone.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazone.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--275fe462-2435-585a-8297-bf0a9fbff7df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazone.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazone.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a7102c9-6b81-5a57-939f-cf6dd576fd8c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazone4d.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazone4d.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91fbcd66-c6d9-5f23-a2c7-78aa1282e648","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazone77.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazone77.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b802d33b-feee-5176-881a-d65c2ae5bbcb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazone777.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazone777.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbe13b41-1be2-52bd-8a5b-fb823951b657","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazone777.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazone777.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11f6ef9a-e081-58e8-bb81-47c5a3a2fffb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoneco.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoneco.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e42b3cb1-0135-5101-9b8a-68b91268f52d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoneconomy.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoneconomy.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed962529-dec0-5124-b151-9133406a11fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonehost.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonehost.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc8ca4cb-3cb1-5755-8f83-95d3ca692265","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonemeths.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonemeths.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb860f42-f23c-58ec-b205-a2d8c23c31fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonencipher.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonencipher.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d77d919-32e1-525a-b88b-f23248bb5f69","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonenergymonitor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonenergymonitor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b6cc4a9-0af9-5543-b8a8-a494e8478ea4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonenergymonitor.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonenergymonitor.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c55aff8c-4310-5a42-a7c9-1c27280bb36b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonerc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonerc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--769e3994-54c6-5d5a-999d-ddec79bd9f9c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazones.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazones.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28c4e98e-8c15-5584-aede-6ba92fe8d4fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonet.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonet.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--798f4097-daee-5338-9668-b13d53031ea7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonetstore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonetstore.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac7ce12a-8647-5996-bda3-893bf491719e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonev.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonev.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db80504a-e411-5c74-8983-7940e3cbf25d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonevents.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonevents.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aebae2cc-f147-59cb-99e8-5e20851f15ec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonevents.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonevents.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd6fcf69-041e-5b41-ba21-21f1e60d33a7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonexpress.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonexpress.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ba5fb05-7a71-5683-ace9-d6d34b1c7bb8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonexpress.best","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonexpress.best']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f28a5a2-33ce-5325-98ad-653bde9dbff0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonexpress.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonexpress.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89068128-834a-56d4-9f0c-8f457229d92e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonexpress.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonexpress.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97de12d4-ab30-519d-8520-45a042d8ae6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonexpress.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonexpress.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0412eab-902e-5ab1-8255-532a2deebd13","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonexpress.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonexpress.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f82f538-2050-5e66-955e-45e53be1aa6c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonexpress.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonexpress.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--605159e2-43a5-591e-b6e0-46504e2fbccd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonexpress.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonexpress.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6376baed-af77-5ad6-92ba-de223b09517b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonexpress.makeup","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonexpress.makeup']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b816e71-e7cf-5c2f-978d-c01161f26257","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonexpress.work","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonexpress.work']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d2c8222-60c6-518d-8812-6ebf1dc8cb74","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonexpressnews.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonexpressnews.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0efa37a3-4ebd-5636-b62e-e1a5c8624c5e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonfbaaccounting.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfbaaccounting.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--080e0183-8c62-541f-bb4f-f5005840c9b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonfbaandmarketplacetraining04.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfbaandmarketplacetraining04.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439afbbc-d48b-5bfa-9eee-1f2ff89c61ba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonfbaandmarketplacetraining07.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfbaandmarketplacetraining07.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9030ae82-02e9-5893-a496-55294c7e1156","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonfbaandmarketplacetrainingfinder.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfbaandmarketplacetrainingfinder.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--380b1a70-8427-51ab-8a84-83c3e93b16b7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonfbaandmarketplacetraininghub.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfbaandmarketplacetraininghub.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--901b7cf7-a73c-542b-9091-3ae134a4d3e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonfbaandmarketplacetrainingonline.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfbaandmarketplacetrainingonline.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88bd43d4-25af-5033-88cd-9d71afaa78e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonfbaandmarketplacetrainingplus34.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfbaandmarketplacetrainingplus34.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46e425ab-7110-588e-8d40-2e169a8cb1ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonfbabroker.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfbabroker.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02fd49ca-3d3a-5c44-88f5-5c4cb4e99007","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonfiller.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfiller.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f0b3d99-83c7-55b9-8023-1ca15abe52c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonfilm.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfilm.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84a1bc4b-67eb-5a4a-b343-62fb00aa595f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonfishing.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfishing.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc6b35ad-99b2-5091-ac2e-2865ebf85a89","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonfone.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfone.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ee737b0-3917-58dc-8532-1ec26eb4e576","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonfoodlabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfoodlabs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7d6ed38-7c3b-5508-8902-4f1d668bbeae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonforce.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonforce.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1be2522-1253-52f9-8e9e-199ad7477b99","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonforce.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonforce.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad64484e-d6dc-55d6-a5af-6680e4d79bc7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonforus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonforus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5848d0dd-0505-50f2-8da7-c5639dd97709","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonfossilfree.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfossilfree.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3a179c3-1de7-59ed-8886-5e4d2aceac33","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonfossilfreemonitor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfossilfreemonitor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07f4dbd8-512a-5292-88ef-6c655a2c2e68","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonfossilfreemonitor.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfossilfreemonitor.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42db66b0-2de6-565c-b0a4-1004dec3c54c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonfr.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfr.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff2cfb11-6211-5dac-9ca1-6bea43152758","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonfuckedus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfuckedus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac037396-1171-5e8c-85c4-99f3ecbbd83f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonfulfillmentcareer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfulfillmentcareer.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc473a89-85bd-5f14-92cd-f37292948119","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonfund.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfund.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--215fdb65-3662-5809-94b0-9a51eead8a3c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazong.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazong.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3366ab98-e1de-546c-99a0-24bfb99c2d5c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazongd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazongd.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--058b8d74-2269-5b94-b69b-8b23e77b645d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazongen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazongen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26d33ea2-0deb-5809-b7ec-a1af0b4cd663","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonglobalsource.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonglobalsource.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efd6c9ef-a3ac-59c7-9a40-3aea12201567","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazongoldensnakeiquitos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazongoldensnakeiquitos.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c48aca0-2428-5263-ab85-84a9b33683d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazongrants.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazongrants.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5e20aee-d85d-5b1e-b015-d0a6489baed8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazongreentreasure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazongreentreasure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6e0e967-3afb-5c16-97df-bb30eeebfb59","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazongroup05.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazongroup05.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3dbad6c-1e28-5894-a19d-16988ff45b8d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazongroup06.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazongroup06.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de7deb39-3601-5d27-88f5-7a420502cbd0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazongroup07.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazongroup07.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f062218-7750-5eed-b090-d075ef50caf4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazongroup08.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazongroup08.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4521e2fb-fa9f-573a-8440-2816805eac1d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonh5.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonh5.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac6aa7b4-8cda-51e1-811f-ed6a647ef946","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonhaulcn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonhaulcn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e99d883-b0c2-594d-8f7c-cb7b284654c4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonhaulcn.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonhaulcn.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0207f3f3-1179-5b0c-8787-8b4d1748f319","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonhenan.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonhenan.top']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca267a54-943b-5117-ba4b-129a66d8bc3d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonhookah.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonhookah.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a22db1a-dafd-5c32-bb71-66aebc178ae8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonhost.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonhost.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--814a72d5-9041-5a51-ac15-2bd921277c7f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonhost.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonhost.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92883872-8d66-5245-b9c2-baa77efe76c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonhost.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonhost.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2213e910-052a-5231-9d0a-e6ad73a35893","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonhost.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonhost.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e408c31-c69f-537f-8ebf-d992730dae1f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonhosting.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonhosting.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ca02198-e39d-5b18-8733-dc0974e42423","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonhosting.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonhosting.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d50d97f3-826f-532a-b83e-b073b1a111d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoni.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoni.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dc426cc-9503-5d69-ab95-35a170965de7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoni.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoni.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be341716-767f-53ac-8c3d-19a69261ab88","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonia-fair.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonia-fair.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0dc2729-c99c-5080-8743-424dacc5971b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonia.coffee","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonia.coffee']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdc41de1-3e93-5e3a-a07c-55bbebf7f0da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonia.game","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonia.game']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aecf9964-6173-5bca-92c4-18966984697e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonia.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonia.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de022ed0-312f-55ea-a948-cad18a151afd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoniabiobv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoniabiobv.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c57eab74-2fcc-578d-b01c-532614c4e239","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoniaclimatica.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoniaclimatica.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aeb1dd0-8fc6-527d-9cd5-0c3ef932b678","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoniaclimatica.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoniaclimatica.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbfff025-a712-5e92-bb7f-24ad9b0c4d17","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoniaecopark.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoniaecopark.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1cd682c-a056-5162-a548-b71d981b645e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoniaenergymonitor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoniaenergymonitor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--042b0d6d-51bc-5d58-9049-70bbafc6eb54","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoniaenergymonitor.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoniaenergymonitor.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6c04430-8d37-5d6b-ba30-b3dfef819994","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoniafair.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoniafair.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a306dc1-15d4-5a78-b5ac-967a4a9ff207","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoniahub.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoniahub.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86397381-644a-584a-b316-194fbbfa92c6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoniak.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoniak.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24287842-0a87-5639-aa52-d6d486295325","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonialivredepetroleo.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonialivredepetroleo.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc92335f-600f-50ab-a653-f36ef2e2e9ed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonian.express","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonian.express']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c8cb276-e6fd-5188-b477-b1ee168b3ab9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonianaturalbrasil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonianaturalbrasil.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8db9f536-921e-5605-ac1f-039da6fc8b09","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonianfitness.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonianfitness.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--966479ff-69aa-5af5-a6f2-38708058293c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonianj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonianj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cb3677f-a039-5118-ae2e-3d1712800d5d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoniannaturals.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoniannaturals.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0458bef1-70a8-5b68-8021-a06bd29b2d29","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonica.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonica.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02156a89-ac67-5fb4-a2ec-77e6efa4a759","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonico.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonico.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--979631f4-9b36-5716-9547-0a630c8b64bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonifyme.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonifyme.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab526069-093d-59f9-b6d5-11d0fd4d25eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoniksuministros.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoniksuministros.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea74fb71-e8ae-55f0-ad8f-caca33a064ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonin.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonin.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c5379ee-3922-5876-8bad-8eb52a81aa1e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoninc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoninc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9cebfa9-05aa-5f4f-ad97-888d6cc28578","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoninmemphis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoninmemphis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ac26e46-7286-5f89-aa6e-2b09a81637d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonitetreatmentcenter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonitetreatmentcenter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcc9f35f-3279-5836-9327-4d7247635585","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonixabrasil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonixabrasil.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c60952e9-1758-5f23-a5f2-10c65934abd2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonixasite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonixasite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79e3c144-4e80-51af-b08f-e7e2330c1794","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonizer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonizer.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be359896-7f7f-5a53-a9b8-d944b0428e45","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonj.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonj.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dcb8c49-14de-53aa-aaa1-b226584da696","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapan-jp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapan-jp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f01ce096-7498-5c94-b656-d1ea4db47c96","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapan-mall.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapan-mall.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4022011-39ac-5c6b-a188-f26b200a364d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapan-market.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapan-market.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--975b16b5-dd9d-5f42-a5a8-fb4c9abcb4da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapan-store.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapan-store.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24551775-f12c-5658-ba95-af5c834c41b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapan.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapan.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cfb45e4-5da2-543b-a551-ccccdc5814d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanalcohol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanalcohol.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1213123d-de9f-5807-95d0-051fb65c7fc7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanaudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanaudio.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1830ed9-1c91-5f7f-adb9-eab5af3513d3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanauto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanauto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b47f2da4-d715-5595-84d2-23d26f2f2b8b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanbaby.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanbaby.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc5bacbc-be76-5111-a0cc-d029f081475d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanbag.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanbag.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--863171ec-7e5d-513e-b185-b8d3a1699cc9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanbargain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanbargain.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7059a98-9aa0-5ea4-802a-8483b89da65e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanbeauty.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanbeauty.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79cb04d1-d7d6-555c-89d4-469c4c6e3692","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanbest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanbest.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd756b94-afb9-575b-8faf-d3bee7dff98c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanbig.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanbig.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c5aea19-f49b-5266-b3e5-f8e6c4783647","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanbook.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanbook.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--732c54cb-c4c8-545b-9f0e-559bddc5aab1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanbrand.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanbrand.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed6db4b9-7561-5016-bb9a-f3e545ec11af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapancamera.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapancamera.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724affd4-3c94-5dd5-8da3-ea19259f3fe0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapancenter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapancenter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57871fa2-1a6c-5f66-99a6-bce2b8e8a8b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapancheap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapancheap.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b16aa966-63a7-5dc1-954b-6b19fee1ba38","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapancloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapancloud.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f1af3fb-8cb6-5568-bd0d-aea9cdb270ef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanclub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanclub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--286b3766-81d4-5bbf-ad3f-46f878b2ed0f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapandirect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapandirect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a35247c7-db10-529c-8809-8be7a78f61c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapandrink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapandrink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b0c10d6-c63d-50f3-b725-86e29d12a5c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapaneco.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapaneco.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63e14670-5593-5a20-ac01-de6be9bfc086","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanese.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanese.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aecb058-4012-5ac7-b139-f4d5ba522a34","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanexpress.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanexpress.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dee5c0cc-e20f-5403-bc84-401536d60f76","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanfast.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanfast.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c3f0677-49ca-565c-a0aa-2efdeef8c4f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanflash.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanflash.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94314b00-3a59-5c33-a0a1-041430a9a20b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanfood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanfood.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1691d79a-fe7c-5aab-9c97-5f450eb21c99","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapangame.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapangame.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d59e79d-145a-5b6e-a6b2-fd4bf47f6754","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanglobal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanglobal.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aae892e0-d769-52a0-befc-1e6ef00063c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapangoods.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapangoods.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7b535eb-90c5-5965-9d99-956f567f30f4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanhome.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanhome.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5fc95db-4c91-565b-8013-6a99c79f27de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanhub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanhub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d1d4dc5-2363-58c2-884d-2e2ed824c7d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanitem.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanitem.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39681750-d278-5160-af12-4a1404a60bed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanlife.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanlife.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed8e3787-01b4-5532-b7a7-b6888552059a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanlink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanlink.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e7d96ae-2c46-5b89-a08f-895800abd506","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanlocal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanlocal.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bea3bc25-cb31-53cd-ae6b-de296050ebd2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanmall.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanmall.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ae72e6d-7175-5648-91ef-8b88bad1ff3b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanmarket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanmarket.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94f340ed-90d9-52ac-9eda-28015887e010","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanmart.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanmart.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46bc87c0-edb7-58be-9e17-dd747ce59d39","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanmember.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanmember.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7581b3ee-8f71-57d5-81b9-7c4c66d5de8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanmobile.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanmobile.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08997180-9186-5d87-8183-403ceedb6b17","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanmusic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanmusic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa0db140-7a7f-5a4a-9718-8fe0a456a183","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanplus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanplus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--399749d0-c9a8-51f6-bc33-22ec99d394cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanprime.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanprime.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab4b85a-e612-5c86-9493-3c8c61ff9395","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanpro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanpro.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bb7da80-7680-5428-ad74-d5ed9c2e507e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapansale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapansale.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1251910-9c16-5575-8f42-938e9c9901c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapansave.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapansave.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dfd464f-21e5-5514-9497-adad5c48dbfd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanservice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanservice.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c55f7616-1a79-51e5-a89a-9bb2c38eb15d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanshop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5659916d-e51b-5b90-971f-c69d2eec86b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapansoftware.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapansoftware.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af90d497-02c8-573d-a77c-d32571257a27","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanstar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanstar.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddb731c2-ecfe-54e8-b4dd-4cb5d95e50a9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanstore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanstore.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c459bd93-b30f-5986-b7ec-ffc3d2aed888","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanstore.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanstore.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d935653a-bff2-55bb-ac23-50c9f7fce599","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanstores.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanstores.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07f08729-34f4-53a5-8b38-70d85ad172a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanstyle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanstyle.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e03d968-f40b-5f67-9f3e-acfe4959b32c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapansuper.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapansuper.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7465597b-e98a-533c-9ef6-b6666fb29a15","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapantoday.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapantoday.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75b66197-108e-5b57-b941-e867ff574362","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapantoy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapantoy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f7c6b5e-2017-5088-bb5a-10b24684e9c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanvalue.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanvalue.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7960b33-74db-50ed-9d27-ca6d0201d99e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanvideo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanvideo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3169f851-5092-5542-9523-47962c671182","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanvip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanvip.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c547f406-893e-53af-8370-0544a810be03","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanwatch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanwatch.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a571a30-3c3d-5a71-a29b-d12d8e51da0e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjapanworld.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjapanworld.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acad01ea-e919-50a0-aaaf-da058bdc4461","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjb.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjb.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6321a99e-1a10-5a78-95ef-70563a5bff29","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjb.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjb.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8596325-9a26-5349-8104-d24ab9a4542a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjp.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjp.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b81d266-1967-55bc-a562-dd7947ec48dc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjp.homes","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjp.homes']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df6f476f-29d9-573c-9a40-a774405632e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpaygglfeo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpaygglfeo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce9c7ba3-2178-5576-87ab-52bdc8bbd6a7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpbgbwtllo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpbgbwtllo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6e717d9-bf26-5412-bcf3-9390b8c8d9b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpbgbwtllo.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpbgbwtllo.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86f14472-ef9b-5673-a5ae-4d7a91f802c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpcdlxhegz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpcdlxhegz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18cbfff8-9d38-5691-8de6-cabd93f92482","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpcdlxhegz.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpcdlxhegz.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d7a47a0-52d3-591d-8628-447d17379579","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpckmnmxos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpckmnmxos.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a835305f-2307-58b0-91f6-b7b74bb8726a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpckmnmxos.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpckmnmxos.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9618ecb-2525-5340-b4ea-d5c56713befa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpcovvcebb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpcovvcebb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--269ac5ea-e6af-5d55-a002-390b2e1a819e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpcovvcebb.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpcovvcebb.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3004f599-3f3a-5fc6-b7bd-b72017ffe1cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpdcexytos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpdcexytos.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2100e570-c163-57c5-bf79-a825ed7bd03c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpdcexytos.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpdcexytos.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b34a4b9-80eb-5a06-9021-089912e6efaf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpegpxurdl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpegpxurdl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f33d3b3c-f499-5fce-a3e0-ee236dfa293b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpegpxurdl.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpegpxurdl.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1230f91c-3c7c-5fb0-b2bc-2004ceb91f64","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpevplwwes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpevplwwes.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6812ad61-db98-550f-81f8-c50523d173c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpevplwwes.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpevplwwes.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dc418f1-6a85-56e4-bc90-aee5c64da33d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpezdhfssx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpezdhfssx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdeb5522-5f8b-5929-9589-d5a9a7ac9760","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpezdhfssx.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpezdhfssx.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7869878-708c-51a3-b39a-e5ed2e2b0c53","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpfddzpytp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpfddzpytp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c3b6ebc-6c0c-544c-8e4b-e92d30fa9891","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpfddzpytp.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpfddzpytp.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--094f71f5-5ca3-580b-af41-ef5a458d27d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpfhqjmujc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpfhqjmujc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2639dad5-75f0-57bb-85ad-23bf2650a657","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpfhqjmujc.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpfhqjmujc.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--635b5ec5-11b0-5854-ba22-0eaf7bb2005d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpfjmfxnhj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpfjmfxnhj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1453984b-3bcb-5885-b424-f6753ffcb038","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpfjmfxnhj.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpfjmfxnhj.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ab0cf65-b225-5405-adc0-24da720f36a9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpftuvrwnw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpftuvrwnw.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--061eff85-e513-57cc-9930-57fb07024a1d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpftuvrwnw.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpftuvrwnw.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7afe09b4-a2c9-5f07-bbce-b032d25f43e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpfwcewiiv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpfwcewiiv.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7532d15-bcde-5ed0-bdff-6579253d4891","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpfwcewiiv.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpfwcewiiv.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f9520a-837f-52d7-b2d3-f22b7aed91e6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpgghwbcuy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpgghwbcuy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fafdaa3f-af3d-52bf-89b7-39d6bdf29ad8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpgghwbcuy.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpgghwbcuy.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c661b563-0300-5b30-9dd1-db639e2bc2d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpgrkgjkni.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpgrkgjkni.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3017dd4e-1763-573d-b852-77d1e2cf2586","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpgrkgjkni.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpgrkgjkni.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b82a6d-d97d-5d31-8c67-deccb1654561","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpgvcrllxd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpgvcrllxd.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b5e3d65-2f96-52de-a21a-45495d46d704","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpgvcrllxd.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpgvcrllxd.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--485e84c5-fbb1-5ea8-a269-514510ceb6e1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjphhfklhet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjphhfklhet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb178e3d-3515-5414-9362-6168eea6f40e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjphhfklhet.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjphhfklhet.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac819ce3-cb75-5f72-aefa-e97540a6ba27","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjphjvpxdbq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjphjvpxdbq.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a00a5100-0d44-5ef1-ad97-1c922947b1c6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjphjvpxdbq.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjphjvpxdbq.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf2ac7a6-a0f3-559f-8eea-026c5c9f5711","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjphkswyrqt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjphkswyrqt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a078cf2-9e89-5353-a4e4-bded16adaaac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjphkswyrqt.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjphkswyrqt.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb499037-493c-533e-a4d1-2fac472ee02c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjphsqwlymo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjphsqwlymo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--391d6897-d994-5822-a275-3a3e88de279d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjphsqwlymo.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjphsqwlymo.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5049d3d9-df93-56a5-a93e-be10d74a91f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjphvzgilys.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjphvzgilys.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad3286b1-ade6-589f-9f3b-8e95671eaaa9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpimyznjwh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpimyznjwh.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecc98790-e153-5a24-8e2a-388dd9614909","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpimyznjwh.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpimyznjwh.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52759098-14aa-5e37-9143-d8c073541df0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpiouitjoi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpiouitjoi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0fdd4de-7c5b-5076-9283-14040648ea85","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpiouitjoi.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpiouitjoi.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d6b9b9c-fa7a-5e7d-bf82-d5bf8a83a691","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpjgbeamyy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpjgbeamyy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa1f81e2-e409-5a00-865c-bc47cf2156f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpjgbeamyy.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpjgbeamyy.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c78295b-710c-56ce-8942-4ed8f8fc702a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpjpkfwtmr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpjpkfwtmr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a8c70f1-9d03-5fb9-83f2-988dc7a72064","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpjpkfwtmr.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpjpkfwtmr.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6f5e7cd-21ee-5135-ab3e-387cfc1dde5d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpjsjwtqfk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpjsjwtqfk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b29ec87-b028-5367-aaf7-a62a19f30271","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpjsjwtqfk.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpjsjwtqfk.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c017ac6-67bb-5639-8a30-977d020d4351","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpkenffcgi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpkenffcgi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21c185c8-b7c5-56a1-bf56-7bfd2fe3fcf9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpkenffcgi.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpkenffcgi.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef01bae-17bc-58e4-b157-d04bec86d011","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpkkphodyj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpkkphodyj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53b2b8e7-d863-5cf0-83d5-f7543939e0f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpkkphodyj.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpkkphodyj.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f52f91e0-0801-5fa7-bceb-c92339d2c952","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjplghtpttg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjplghtpttg.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33a2b331-c4a3-50f6-bb25-2dd345540977","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjplghtpttg.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjplghtpttg.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f77d8187-5dbd-5044-80ea-2a05487a0736","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpllgbxmsm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpllgbxmsm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44865c61-5a04-5ca5-b571-0bf646e17945","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpllgbxmsm.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpllgbxmsm.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac64a26a-8949-5e48-9198-94a147f71eeb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjplnoninxv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjplnoninxv.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f29ee5d9-887b-54c9-9d29-1ea8fbdef990","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjplnoninxv.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjplnoninxv.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af696263-ae7e-5357-8ca9-cebd9c22ad7d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpmall.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpmall.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b29e37d2-fc0e-5904-99db-51a099541510","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpmduhzqfi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpmduhzqfi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--014f0ca6-eb12-54d5-af11-6aebb33af923","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpmduhzqfi.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpmduhzqfi.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37efdf40-d254-52a1-b579-50aa8ff24290","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpmpjwxgbi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpmpjwxgbi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d71607c-481c-5624-94d8-4ab50fa6d65d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpmpjwxgbi.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpmpjwxgbi.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b153447-e180-58b4-b6c4-a2fd51952c43","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpmtfmzyrx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpmtfmzyrx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56aa094f-5d4f-581d-946c-b0cfd087733b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpmtfmzyrx.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpmtfmzyrx.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0bf46d4-b2c7-5a5c-95ba-6f57504192af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2427beed-d79e-5ceb-90db-3454baca9104","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpnbswwrte.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpnbswwrte.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a13596a-af7e-5623-a01c-9a1b16ec6a81","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpnbswwrte.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpnbswwrte.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee6d1a24-75b3-50de-b7ef-e3afc531c913","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpnyccwvrw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpnyccwvrw.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04c1dba3-bbfa-54bf-99e0-75c48a68ec27","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpnyccwvrw.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpnyccwvrw.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dc1f4fc-7728-5f47-862d-2844662b4a38","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpnykfnizj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpnykfnizj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dab60735-c971-5db2-9189-2ba47995d848","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpnykfnizj.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpnykfnizj.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77092ba3-0007-535b-b234-248897183268","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpokeetpbw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpokeetpbw.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb0418b2-b80d-5a02-bd67-bc20b13df73f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpokeetpbw.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpokeetpbw.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcb65db3-33f0-539f-9dec-110148d72708","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpoljsmnos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpoljsmnos.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc123b70-f894-50f8-9e63-cfeb7139a20f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpoljsmnos.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpoljsmnos.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff67b5d9-99ba-5c98-bea4-cfc04fdbc1f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpolwgkcwy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpolwgkcwy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f75d6fe-62d1-59fc-9469-fdcb93be31c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpolwgkcwy.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpolwgkcwy.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--166047b7-dad9-53e2-9010-cdff807b882b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpornqjkus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpornqjkus.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86148c19-0c4b-57a5-a10d-b2f360e34824","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpornqjkus.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpornqjkus.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76684116-7e27-53ad-9ec6-10d90937c264","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpphnxmdrj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpphnxmdrj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0b4c6b2-e7d5-519b-838f-f95d8eef6d0c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpphnxmdrj.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpphnxmdrj.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fdc20c7-b926-5e50-a11f-abf5467deb12","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjppikydnkr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjppikydnkr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c21bb276-8424-5c16-9738-5943ae5664a9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjppikydnkr.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjppikydnkr.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd74af57-b40f-564b-b4cf-d1272169e66b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjppjeyncui.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjppjeyncui.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d33db70f-51db-5509-9ebe-7ede5303ffb7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjppjeyncui.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjppjeyncui.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fa42644-ffcd-5102-8b89-1aded4e000f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpqhlwiikl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpqhlwiikl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4acfe614-66d8-584e-9501-248a67081624","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpqhlwiikl.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpqhlwiikl.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--022e3901-34c8-590a-bf11-6184f716b1e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpqjmqqufi.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpqjmqqufi.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46db7627-9a8a-5d06-9374-2e038faad6c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpqlqjwnrp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpqlqjwnrp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a283a40d-97da-5cdf-ac62-7d4b079df246","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpqlqjwnrp.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpqlqjwnrp.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b22c93a-c44a-5ec7-aefe-53d9e6c856ad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpsbynpvyw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpsbynpvyw.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcd78969-812f-5057-ba82-5c88ed366ebf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpsbynpvyw.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpsbynpvyw.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa9c68c5-4c7f-50af-8b59-b6ad6564eee4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpsqstxipq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpsqstxipq.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8201e343-076c-5891-8f58-c3c377e80b47","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpsqstxipq.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpsqstxipq.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00440597-d002-5cc7-ae4b-1e4a6f1003c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpsyvnmidf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpsyvnmidf.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f370863-8e0b-5fde-9bfa-474b3ad77749","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpsyvnmidf.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpsyvnmidf.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4991ffaf-3c4d-51d9-b20a-a7cf19eafbac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpteuvhedc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpteuvhedc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87fc9f3d-bb44-5872-ac6e-31c57efcb10d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpteuvhedc.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpteuvhedc.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71a16ac6-c456-5d89-be71-b501e2bfa1da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjptlnhjxsj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjptlnhjxsj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb133e00-e72b-5346-b5e1-e19fd5ae2d7a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjptlnhjxsj.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjptlnhjxsj.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc0874f5-847f-5e57-a397-64759b96f0a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjptnqkifoq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjptnqkifoq.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69cf1b82-379d-5989-ad07-cb565fc15f1e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjptnqkifoq.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjptnqkifoq.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1c9520-6284-5b94-b585-61eb25bf1bfa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjptryqqolc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjptryqqolc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43867cbc-418c-516c-a567-80b62d95c9e2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjptryqqolc.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjptryqqolc.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68e0b7f0-2633-56bf-a1ae-08dda8ae4c91","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpttogoeqj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpttogoeqj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4160e4f0-a051-5be6-b37c-c7d57253bce1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpttogoeqj.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpttogoeqj.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73d2af95-326a-51e9-959e-7ce4178ffc36","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjptuyuwpfx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjptuyuwpfx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d2d7de2-f686-5c8c-904b-aa429b4cebe9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjptuyuwpfx.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjptuyuwpfx.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78f47de9-0f7c-590f-89d2-98295145ab35","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpvfqvwkwe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpvfqvwkwe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7deb7f9-cd68-5c1c-9c2b-0cb66fbd630d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpvfqvwkwe.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpvfqvwkwe.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95a8f110-13cb-5c46-bb88-8031e3229e77","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpwkamlhyo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpwkamlhyo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--084461c1-d88f-5ca0-9a53-35f1a2847f4f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpwkamlhyo.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpwkamlhyo.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--654ed485-d653-5317-b9f7-35690eec0cab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpwndeitlx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpwndeitlx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cf4d145-464b-5f12-987b-4e04919041aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpwndeitlx.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpwndeitlx.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eeb42bee-5246-5c31-9628-acc883c7be1c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpwpwxdbug.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpwpwxdbug.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47236807-d332-53f1-b9c8-6e15adbbe0cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpwpwxdbug.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpwpwxdbug.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a8dc5b1-7152-55ed-9104-89e8c4b5b14d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpwqycwmke.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpwqycwmke.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10285589-1b0c-5665-8038-8a145f6a6078","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpwqycwmke.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpwqycwmke.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d45c830c-d2c0-54f2-81db-823dd8015ad4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpwwyxgjme.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpwwyxgjme.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f86788e-b219-5262-b32b-38aef8df5177","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpwwyxgjme.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpwwyxgjme.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d302e18b-7fc8-5652-82a7-f3f8fdc7dc72","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpxfcfysoq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpxfcfysoq.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--476a6dbd-1f04-5a9e-abc7-27c4bb2998f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpxfcfysoq.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpxfcfysoq.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--968d9f97-d636-568c-85c6-54df5c8092c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpxmhnmyiv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpxmhnmyiv.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f471b588-72d1-5fe4-8cd8-a469049da956","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpxmhnmyiv.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpxmhnmyiv.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81f2353d-9efa-52a7-9256-a666c1079916","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjpztvgwxzr.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjpztvgwxzr.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d372b48a-a8e7-5f37-be75-0ed8312d2998","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonjungleadventure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonjungleadventure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab0faaae-9e03-5a60-a28e-ec33df12926a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonkaclub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonkaclub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66e6cf9d-a450-5a46-8307-07ee30e72d42","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonkenya.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonkenya.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a234753a-9da0-5741-a5ce-d5518ed6771d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonkp.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonkp.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2526835f-3094-5d7c-be94-67d28a5bc2b4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonlatte.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonlatte.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b94f9e9-0c01-55b2-a273-5ae29510bd21","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonlawsuit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonlawsuit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c9e590-6131-5c6c-9072-4c2ebd9ad9c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonlfk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonlfk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18747469-9bb3-5dec-926c-1bc082c2dfe5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonlily.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonlily.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d42026b6-00bb-5dd1-a653-6d1987b5aedc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonliquidationexpress.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonliquidationexpress.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d188f69-45f0-564e-a9fd-1e15345b16d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonlocksmiths.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonlocksmiths.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35509ad0-cf7c-5663-b595-4166c61d52b9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonlodgeresort.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonlodgeresort.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--749537c3-9e61-5df7-a264-411e2969e5d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonlodgesafaris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonlodgesafaris.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de8136c6-1a9f-5f07-b81f-da8a04131fa7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonlogin.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonlogin.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3242f231-49fa-5961-8a44-296d2cf30439","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonlte.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonlte.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--458316eb-73a9-59b6-9bce-0851a7c3ecc6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonltea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonltea.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a3ee7a5-19c5-5254-bd93-2ca5f2907e6a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonltes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonltes.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da77a4e1-ac27-5408-b7b3-914a3d9df509","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonm.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonm.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e19f00-c7c0-5119-806a-d2dd8d452d5b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonmall.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonmall.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0ef51b9-8d9f-5e2d-937f-2e20a16d3c04","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonmarketingexperts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonmarketingexperts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b30e4d35-239c-563a-8487-f43e52e40a7a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonmaz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonmaz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--282b55fc-c378-55ec-af54-b8a0a36edfc2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonmemphis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonmemphis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09b3f68c-8644-5958-b9d0-3cba852d4612","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonminingchile.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonminingchile.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c20363c1-c0fe-58f9-b97c-e682dc7279ec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonmnv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonmnv.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e0b8a56-3403-572e-b131-88445959fa85","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonmusicsoundsgood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonmusicsoundsgood.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e92a158d-e0df-55b0-b989-9c4965aaf528","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonmusthaves.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonmusthaves.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd04088b-7f61-5715-a0f5-0b5c559a9526","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonn.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonn.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5044006-3f8f-5246-baeb-52d9711d38e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonn.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonn.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--433f71af-6da7-5f54-badf-9426cb331aab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonnerusi.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonnerusi.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a40be05-6a2a-5090-91d4-ea5c527fff96","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonnews.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonnews.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78833320-be5c-51b9-a229-8100f97e9ba3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonnews.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonnews.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a47a68-f99c-5bc5-9fbd-f3ec969778ad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonnews.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonnews.cloud']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97e214df-1648-5a22-8cbc-905309129e3e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonnews.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonnews.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02743c3-ecc1-50fa-ac9f-e3b405501b47","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonnews.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonnews.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d22ca2c0-2a0c-52e2-802c-58e09153908a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonnews.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonnews.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0273253-1096-554b-849c-1e9da7e300cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonnews.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonnews.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18466c26-2313-5033-ac9b-9e050c3b0e3e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonnews.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonnews.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f26f1bbb-ddca-5eed-beb7-f2d9098faf79","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonnews.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonnews.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5630a3db-64ce-5a0d-a384-c162cc042c89","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonnipponshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonnipponshop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--163805c6-d33e-5536-b56d-6c814cbad66b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonnon.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonnon.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82708505-6be5-5f9a-9cc3-58ea1f7a9815","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonns.art","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonns.art']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54686c97-1654-5a2d-acd3-5df2a46c96db","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonntw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonntw.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6ea8793-861c-572d-ba9d-a917488c27e1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonnutsfoods.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonnutsfoods.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6361bdf-adec-51ce-b2bb-90cc27b16013","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazono.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazono.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b48b82d-09eb-563b-ba20-b10b3b33ac4e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazono.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazono.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e93b7577-e22e-52bd-a993-5a5673831ee1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonodc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonodc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec1900e-9f67-5c8f-9078-7d4f802ad87f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonofficial.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonofficial.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54bbbd3f-c5f4-524e-8da8-17f467e6ad1a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonokf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonokf.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c40701c4-55b9-5984-ac52-92ec8fd69096","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonokkgg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonokkgg.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--430e3c66-9a33-5a6c-934a-aee5842e9b36","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonondb.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonondb.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88f22e60-d287-51ea-b13c-05e0b6cc909e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazononlinesupports.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazononlinesupports.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8ad765b-507d-5c8e-a3a1-a9e622ae5d8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonono.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonono.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c91fdf07-c141-5b33-8e82-dd95680c05ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazononuk.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazononuk.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d793df7-ff2d-5bec-b3a1-ff3c62cf7879","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazononys.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazononys.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84ee66b6-d5cb-5a79-ada5-e0409fd10b3a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonore.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b249ba7-1592-5714-ad5f-681818560464","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonosakamart.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonosakamart.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0c357bc-769a-5741-ad8d-7c7e7d9e3f87","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonosh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonosh.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4e058c9-bea0-5869-a0fe-da72da885b76","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonosk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonosk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a195fdc-ba32-5726-9fce-f3488e53af14","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonoso.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonoso.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c622dac5-1dd8-56f5-9e8b-fcbe37723e7f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonoym.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonoym.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f28d7ae-996e-5310-9c47-08c7b1090445","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonpalletandliquidationcenter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonpalletandliquidationcenter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e768560-758a-5049-8975-b91cc4c29367","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonpalmleaf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonpalmleaf.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1fba82d-1702-5b03-ac2a-1f799ffed9e9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonpay.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonpay.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e78a0d4e-5de2-595c-85c1-708bc6b65ec9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonpedido.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonpedido.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eae603c-5a06-582e-b5f9-a2ec9d43e167","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonperutours.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonperutours.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46aa915b-1535-53a2-9001-a1715e982701","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonpkf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonpkf.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b51a9b45-0ef4-595d-8127-daaaa1433cea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonpl.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonpl.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fa660e8-071b-57f2-92aa-72f24ca29fd3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonpls.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonpls.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3f4ce58-e50d-5afe-8972-47068fd51c20","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonpnm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonpnm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94832a33-00f5-5a49-b5d2-06dca3a77b89","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonpoint-inirst.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonpoint-inirst.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d0df894-f600-58a0-a61e-31c4b3f55db1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonpoint-inoesi.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonpoint-inoesi.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8b000db-8e96-58ce-92c2-1258d1fb1f61","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonpoint-inrulf.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonpoint-inrulf.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de31c114-7673-5bd4-90ea-e43a0c9d7fa2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonpoint-inrult.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonpoint-inrult.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd34cca9-6cce-51a1-8781-2e1d29ed272f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonpoint-insent.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonpoint-insent.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af1d2940-eda8-5481-b3b3-37d9728822af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonpoint-insteo.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonpoint-insteo.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dccdfa20-6b4b-5b89-ac0d-81a7d1f1fbf1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonpol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonpol.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35033577-2458-575c-b495-40f4c3ea50df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonpon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonpon.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe31b997-4fcd-575a-86d8-24e457c149d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonposteros.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonposteros.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f60e38f6-4ff0-5440-af36-5c6116959ae0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonppc.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonppc.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c91f00a-90df-50a5-a73b-0710fa1584e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonprimeio.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonprimeio.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c9a7999-3341-56e4-ae7e-1aa1e40a1aab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonprimepr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonprimepr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f136d16e-b3a9-5504-8156-37bd1c6d2627","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonprimewindows.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonprimewindows.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11ad779e-2d0c-5755-8641-8a2db3849167","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonprofitsites.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonprofitsites.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c126da78-e2da-55b5-8d95-cbff34239505","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonproperties.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonproperties.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67062a5c-14f8-544d-8e0e-b403fd802ac0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonpsz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonpsz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d8927cd-de55-5dcc-9871-19bc08978134","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonpvc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonpvc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7ed00d3-3efa-5a79-88dc-0e935bf9c32f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonr.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonr.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d46758e-a417-5736-9980-098ede8e0c67","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonrainessentials.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonrainessentials.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04bc3b41-8ebd-567d-9640-4e6988fbcf14","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonrainforesthr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonrainforesthr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9abfc8a1-c260-5c0f-8491-36abb94d420b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonrainforesttours.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonrainforesttours.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93d97b79-d732-5984-bbd3-3efce27385b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonrebuy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonrebuy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba0bee25-aa10-5afe-bb74-bd96fb3c4dbf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonrelay.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonrelay.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73bcb986-7246-5082-b505-b1812751335a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonrer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonrer.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84d3b4d0-6c40-5212-a4bd-2df941a540a1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonreviews.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonreviews.cc']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef6dac15-25cc-58b1-b16e-f42680b59ae5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonrmi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonrmi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc606ff1-4f23-55e8-8b58-66f86b8c604b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonrolex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonrolex.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed468750-9cbe-5a68-b607-f43ec2b4682d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonrt.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonrt.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6539fdb-d843-5651-8409-070161935b71","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazons.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazons.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eeb7f660-b776-5f2f-a8ca-4641e36a0dde","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazons.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazons.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b124c4d1-1fd5-5002-ae86-2e516c28fd7b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonsafety.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonsafety.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--521bdf76-e1f8-55db-9b55-4d6c02ef520a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonsaleclub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonsaleclub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23281e87-5493-5bf0-8c4f-c844ba0cadac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonsaleshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonsaleshop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3522931-a742-5f89-9f51-4c9962f57b88","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonsaless.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonsaless.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1adc8794-1d4a-5d4d-8177-a2bea25bc00f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonsam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonsam.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--224438aa-ac9e-5ebf-9770-d8f6895cdfa3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonscientific.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonscientific.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--048a09fb-60ba-56d4-af51-03c399daf43c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonsecuredcrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonsecuredcrypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1ff2224-bd33-503d-ac13-5a045fbeda76","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonseeker.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonseeker.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bd2b974-e30a-53ec-9c20-ab0cc37fcb7c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonsellercentral.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonsellercentral.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e46db69-762e-5be9-ab64-644b7e71676b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonsellercentral.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonsellercentral.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e414fa27-ab0c-5416-876d-28b24f5478fb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonsellercentral.qpon","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonsellercentral.qpon']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9567eea-1b4b-50dc-939e-aa04a6fcbf58","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonsellingsecrets.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonsellingsecrets.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6469fee5-c06b-5002-87e9-94c208f33a8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonseon.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonseon.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b8a4a0f-91a5-5b57-851b-2d7a3f83ee88","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonservices.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonservices.one']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f3b4daa-5c7a-57bb-9d26-29a38bcb7e40","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonses.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonses.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9239d16b-ad0e-5f36-b0c7-9e4bf4920760","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonsess.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonsess.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--570c2456-f052-56f5-b079-4ddf3564ded3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonsforimpact.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonsforimpact.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a745de2-0a67-5a1b-af9a-a44d4de4ace0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonshoop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonshoop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09f39ec5-46be-504c-ad7d-5d082305aaeb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonshop.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonshop.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--531e08a1-1cde-58be-b133-9fc9fe69e856","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonshop8.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonshop8.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c781f85b-e48d-5c49-b56d-f5cdefb420e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonshoping.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonshoping.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f587d605-f0c6-5ac9-98d6-6ae181728926","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonshopingapp.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonshopingapp.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd7198bb-42fb-5826-a043-2e5c1ecd27c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonshouts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonshouts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dafdda1-8c9d-58a2-a84f-a45200cdd3e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonsiloma.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonsiloma.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2978aea2-53bc-5558-a08d-e1b6bce00253","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonsilomam.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonsilomam.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52502b84-c9b5-55ad-a5fe-bda4a05ecf07","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonskc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonskc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--775e5ad4-8267-58c9-94bf-adf990dd6c42","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonskj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonskj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb1e89ce-cc65-5734-9371-ffc242bedfde","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonslick.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonslick.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e231ea2a-9b1c-5396-8905-e6363fced238","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonslickservices.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonslickservices.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ce62719-8e7c-542f-b963-26126aed8ac0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonslot.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonslot.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f53d2ede-5665-5bab-af02-689c38652e8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonslots-my.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonslots-my.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa2f70ec-e296-57e7-9cda-17ea7b13a88b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonslots.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonslots.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37fe0782-fdaf-5b5d-b9f4-fb7017c9e4e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonslots.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonslots.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e15f9e76-3811-5d36-8c9d-985a3dee3fbe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonslots.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonslots.win']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e83c6098-fed9-5ce7-aa7f-9dac7a4de143","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonslots11.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonslots11.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96b9c9b5-e588-5760-b0ce-13196e6f801d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonslotsgem.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonslotsgem.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--023e7b87-dfc8-5780-891f-cf9c049fb551","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonsmileredirect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonsmileredirect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dcd8e4d-3fe9-55bc-8350-5d9849eaabf0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonsolution.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonsolution.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed7ff39b-0f09-5471-9fa1-733b4311f543","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonsonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonsonline.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5f14d1b-83e5-5b33-8346-36f68964a2bc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonsoundsgood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonsoundsgood.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40fca4b1-1ff5-5d4b-a551-2422d5a371d0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonspendlesssmilemore.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonspendlesssmilemore.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc5f0f1b-c988-5e5a-8ff4-cfee394341d0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonsportsbook.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonsportsbook.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d965ce1-ec38-5966-a27e-cf3d3515e9ae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonssops.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonssops.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beb435da-3c1e-5395-936b-27f9376bd552","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonstore.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonstore.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12c9aebe-0984-5015-99f8-ea230696668b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonstorehouse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonstorehouse.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3491cdb6-6f5a-5a56-87f5-56311134c56e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonstorejapan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonstorejapan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--638f173d-8c3e-568e-ae8a-570d841fa6f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonsupplierservice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonsupplierservice.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3433e29c-17f0-550c-a9a5-38e476eba96b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonsvip.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonsvip.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a23749-7811-55ce-b1a2-b44e547fbd95","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonsvp.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonsvp.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f33a2ed6-b4e6-5056-880e-594d647c5ae6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazontask.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazontask.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1036dfc6-aa9a-5ec7-9657-c97bc1c5b8cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazontask.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazontask.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--083ffb9c-ee16-574d-973b-218366753300","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazontechfinds.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazontechfinds.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3439aab2-62e8-56ec-a03a-86118ec9e136","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazontechreview.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazontechreview.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dfba4e9-1f0f-569e-9cd5-f2b4bdfa08bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonthankyou.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonthankyou.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b64d8235-4d04-5ead-9aa4-725f0b0113bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazontokyostore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazontokyostore.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--753fb818-3ced-595c-83ee-c26d8eb4296c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazontop-up.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazontop-up.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaa576c3-7d0d-5ab0-a1e9-ebd7144dc9fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazontttkiyprime.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazontttkiyprime.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14d76fe1-673b-57c2-903c-af1500ca615b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazontwerk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazontwerk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adf5a8cb-428e-5290-93ad-a3a2190e4ee1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonufo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonufo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb49b962-3b43-5ea8-b879-39c660e40621","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonupdate.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonupdate.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae2e9509-f0ed-5fe7-817a-f4f6e7045733","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonus.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonus.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e75eb2e6-01ab-5e42-9b81-f359bab8fdb1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonus.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonus.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ecff709-da91-5ccf-a8e9-827ed1e80e79","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonusa.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonusa.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7be1de0f-7971-53fd-9594-e78691eeae9c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonvapro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonvapro.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--429abfc5-42e6-54b6-873c-0ccecfb5f40f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonverilfy.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonverilfy.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c27cff7d-c14a-5461-af67-440e5573ce9c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonverlfy.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonverlfy.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e31a40e5-daba-5c25-870c-3abf5615df19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonvillage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonvillage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f054b688-3286-5c84-83f1-1595bf3d19e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonvip-jp.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonvip-jp.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3009d1d3-98ce-5d8e-b008-31c30995f937","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwalmart-investment.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwalmart-investment.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a7f509d-9b01-5b56-8df9-e940a9e07acc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwarehouse.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwarehouse.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ae751f0-117b-5a82-a3fb-b59fb99d1fa4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwebservices.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwebservices.wiki']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1726afb7-b11a-5b1b-93d3-58db84b31d12","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonweird.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonweird.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d69d226-7251-51ea-9b84-2a3fe0f999c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwholesaleliquidations.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwholesaleliquidations.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9598f14d-6cc1-5d73-aa0a-f3036fcad450","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwigreview.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwigreview.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40ed6bca-250c-588f-89f5-b78afe2fe2e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwindowsprime.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwindowsprime.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b728be7b-dba2-5088-a85c-2fcc870696ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwood.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwood.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--646ca615-55e7-51d1-835d-9f8b4f370208","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwork.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwork.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--060b1d1e-382b-5602-a5eb-955b2ecbc5ad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwork.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwork.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--006bf8ce-c991-5444-b8a1-78337b25349a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwork.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwork.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76bd72c9-2078-5533-851f-39cac96fb62f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwwa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwwa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38bdb8fb-d144-5d04-a277-3e25384f51b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwwb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwwb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83958c85-f5e4-52b3-88b0-237588119ee4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwwc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwwc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93b58d74-54ba-50bc-afc0-f482d4948860","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwwd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwwd.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90444393-d331-5c46-b382-5d19318c1a9a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwwe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwwe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5938f40-aa13-5592-9d8a-9a0a92c3bb03","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwwf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwwf.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0541d123-0316-5ff0-a854-10f884d0d588","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwwg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwwg.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5984e4b-8ca5-50df-95cc-53edd80c6ae8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwwi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwwi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa36bb62-c18b-55e0-b43c-38550579fe8d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwwj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwwj.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc879a49-36c6-532d-a964-4909b508c4a6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwwk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwwk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78d84049-124d-599c-af7e-5fae0e98691f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwwl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwwl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de81b234-cc7e-5177-8d89-e37e84626465","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwwm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwwm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce1d8be9-bd03-5395-908b-5e2648597caa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwwn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwwn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--665ec4cf-a0af-598d-b558-fed39fdfdeb6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwwo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwwo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f19eb56-46ea-59b9-a248-8967c80cbc18","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwwp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwwp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a841515-50dd-5217-abf7-69716d692a32","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwwr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwwr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a7e8839-7f2b-5f4c-895a-3e9d837c9879","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwwt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwwt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5afd841c-b8cd-58fc-a58a-72592dfc4f9d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwwy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwwy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6edb04d6-6256-5b21-944a-6c837f5cc006","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonwwz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwwz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00f7e3ab-3ed9-553e-b3f1-ab615b966ba6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonx.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonx.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1475f9f0-aa3c-52b0-9fbf-4ea764bab29f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonxbox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonxbox.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f856abd3-5ecf-5dae-ace8-e23b63366e55","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonxbrokers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonxbrokers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39159703-bfae-5cf9-a81b-a967ecf07ec4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonxpart.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonxpart.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bde11654-52c4-593f-837b-9fda2d08251b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonxr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonxr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53e2c237-2f2d-574d-9e31-2304972a68bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazonz.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonz.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--453f6c2f-9d11-59a9-90e6-95d0f346ebb9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amazoracle.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoracle.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d742ca38-14be-5222-8209-f771b20519a5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambaseltourandtravel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambaseltourandtravel.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57bccfe8-7420-594c-b24d-965350c6dc58","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambaseltrading.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambaseltrading.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b0d60aa-ab37-5bd5-9d50-94058e927b7b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassade-humaniste.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassade-humaniste.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30fc44ed-c347-5051-ab64-cc1926df6269","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadeimpactdivin.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadeimpactdivin.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c490c8d2-e254-5951-906b-5bda17e88b4e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassaderdckenya.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassaderdckenya.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f085b917-83e3-5545-8116-a641fa32f08a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassador-actsol.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassador-actsol.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90be3111-9557-5637-8bcc-87dab5263afd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassador-construction.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassador-construction.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de83f10a-80b3-512f-aae5-80f2b60ac46f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassador215.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassador215.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43fc9036-a592-561a-8130-ee036ed8c523","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadoralternative.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadoralternative.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01ce9b7b-7ca7-51f3-a276-210b8f512833","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadorchannel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadorchannel.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0fb6def-8321-5df3-a8f3-10f5c7a49599","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadorchannel.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadorchannel.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de6a1184-dd65-5186-9795-a331539c1564","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadorchannel.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadorchannel.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--642f5e9f-ecf3-5100-9c87-3fa18beebb21","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadordave.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadordave.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60ca4329-cfbd-51d0-9d8e-0280e655b091","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadorelena.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadorelena.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9980eda-df34-5c57-99b9-338f4ee9bbb9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadorenergycollege.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadorenergycollege.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0344206f-c45c-58a1-a5b4-4cc70f823343","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadorenterprisesinc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadorenterprisesinc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c1cc73-39c1-5770-a5d2-a9d51e1e557f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadorfiles.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadorfiles.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eb89a9a-c2b3-5a53-a492-967bad7b22f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadorfireplaces.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadorfireplaces.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0327ae3d-bd8f-5bea-a3f0-edddfdd731e9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadormall.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadormall.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecf47363-d0f5-581c-bb2f-e50272ca633c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadorofchristintl.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadorofchristintl.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc8cc1e-5da1-58d3-86a8-4aa88586f826","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadorofchristworldwide.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadorofchristworldwide.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48ad3772-1044-5e1e-bb1a-12cd4893779c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadorofthedandelion.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadorofthedandelion.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be5f33fb-a8ae-5866-baf3-0cd397d8a2c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadors4humanity.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadors4humanity.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc89e66b-7913-596d-8c23-7919a118197c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadors4humanity.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadors4humanity.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b92e02bc-e4d2-5891-b2ac-bc4ebcbffdc4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadorshotel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadorshotel.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17bb812b-17aa-5220-bf45-e08a5485e89b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadorsof.hiphop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadorsof.hiphop']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f5fc799-6952-5655-88cf-537f0e21a734","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadorsofentrepreneurship.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadorsofentrepreneurship.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba24944c-13a4-571a-a09e-a9acf54f5e1f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadorsofhopekenya.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadorsofhopekenya.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1b06d26-3a2c-54bf-a426-89aa2b684bfe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadorsofhospitality.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadorsofhospitality.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c13bd6-2835-5985-aafc-f514a26798ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadorstaff.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadorstaff.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef0ef080-150a-51df-bb91-1666ab3e6979","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadorstafffing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadorstafffing.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0adb1c5c-14a9-565a-8b39-261d7c8fc668","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadortransportation.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadortransportation.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb3e35e1-e5a7-5297-a190-39558e09eb48","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadorworldservice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadorworldservice.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c31e5b22-14f2-52ec-8d75-a183b7e81657","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadorworldservice.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadorworldservice.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b93b2f75-88bc-5f11-a352-e07930c10962","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadorworldservice.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadorworldservice.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68e2899d-a49c-522e-abb4-cd0783a8e0e6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassadriceprestige.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassadriceprestige.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f176fa11-7e49-5e46-80d3-4bc286fc9818","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambassedorbridge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambassedorbridge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f846084-93a8-585c-9536-7e40a6e52686","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambatturinsuranceservices.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambatturinsuranceservices.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f103e489-9734-5a3f-bf79-2efb070780dc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambessa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambessa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddd3f25f-cf41-5586-b979-6b51fd48707f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambienknowledgebase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambienknowledgebase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84e3ff03-b938-5477-b09c-0329ea69386c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambire-wallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambire-wallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0fc6f10-8a0e-5202-96f2-83755cf94a8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambitussa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambitussa.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36587741-990e-5ac0-b4c1-e753a2898268","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambonkasfha7.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambonkasfha7.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a20e308-00ab-5725-ab86-e214f6579ac7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambonksdbhisf6.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambonksdbhisf6.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c086447b-5979-51e8-b9d7-d0b5e0b652b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambonkskdhfif7.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambonkskdhfif7.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8cd562a-99de-566d-bf58-de3d94d6d884","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambridgesolution.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambridgesolution.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9975115-e27e-56f4-babf-660fac5d6227","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambridgetowing.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambridgetowing.top']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44766358-1109-57b6-8fb3-e47176f8281a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambrosianabiblioteca.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambrosianabiblioteca.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b8bd6ad-c7cd-5106-a66a-c91b7c69d455","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ambusinesstrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambusinesstrust.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a088792a-278d-56b3-8c9f-9849bdd53a37","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amclaims.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amclaims.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--992d23c5-e555-5e79-a892-bd54ed190558","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amcryptoteams.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amcryptoteams.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d390b469-d78f-53e7-b9d8-d1711a64ba5b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amds-secure.cam","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amds-secure.cam']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e66afa2f-8870-5e50-9166-9d366b92a481","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amds-secured.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amds-secured.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52a37cbe-43b3-5c14-8b96-567e6ecba972","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ameblojp.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ameblojp.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbe5274a-0c38-5b0f-b9dd-a5b2b608f8fc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amed2143bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amed2143bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a5dfb0c-bed0-5673-bfc4-f1632a94d424","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amehtrust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amehtrust.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e57c13d-0ea1-5ca0-98e7-58a4fbe5ccbb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ameihairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ameihairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7843ee1c-3cca-5fda-be3c-6d1ceeaefb78","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amelectronicpayments.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amelectronicpayments.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a304a9ef-8d78-5b0a-8217-d8ec10983ba9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ameli-droitssante.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ameli-droitssante.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f85c6ae8-8fb0-5ad1-aaa9-261f608c607d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ameli-gouv-secure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ameli-gouv-secure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b50d12f-3bcd-5b64-a92f-7a02ac2b03d2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amelia-rally.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amelia-rally.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9c1f94f-d6de-51da-b05b-1dcbbab261da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ameliatoken.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ameliatoken.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c9d1422-8d3b-58d1-87f6-055203458562","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ameliatoken.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ameliatoken.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aae8c65d-f342-5062-8e35-fc8d1642a5a5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amelirenouvellementsecure.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amelirenouvellementsecure.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fac8a420-389c-5106-a8a4-80ed307af62f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amenabeauty.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amenabeauty.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4216316f-f02b-5d22-893d-1e01054669a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amenabil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amenabil.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36d62917-2255-50cc-bdbd-1d4b95587a8e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amenabil.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amenabil.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--884ef8a8-93b1-534a-98f3-2107c4706b99","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amenabil.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amenabil.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c29fffa0-15fb-5167-bc1e-42d56a951181","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amenagroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amenagroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3add0cc3-11d3-5575-9396-c2de0cc03a6a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendmentpayclaim.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendmentpayclaim.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3dcb9b9-5552-5b7d-80cc-6005ee27579d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendmentsecureclaim.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendmentsecureclaim.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70796a07-2376-539f-9582-28bcb3d1f8b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendtrust-0.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendtrust-0.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1670cdf-f28e-5f42-a745-577cc5c1d709","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendtrust-1.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendtrust-1.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34709503-4c64-504c-8a11-1024221d1a43","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendtrust-10.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendtrust-10.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f025eca-9746-588c-a09e-ed055a4d51d2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendtrust-11.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendtrust-11.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7493925-2192-5e7a-b44e-0e6a7096e739","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendtrust-12.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendtrust-12.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62476c21-20c6-5f0c-844e-49452e39b24a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendtrust-13.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendtrust-13.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d96ae0fd-c36a-5086-b21f-e0053bcf0bf5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendtrust-14.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendtrust-14.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f69c5f57-9256-52c3-87cf-0e9701359cbf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendtrust-15.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendtrust-15.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baa28b7d-c2ef-5f43-be85-ef30cad9755e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendtrust-16.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendtrust-16.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21eef360-ab67-539a-b43d-5974343572ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendtrust-17.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendtrust-17.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27aac1b4-0d96-5f3a-a3b3-2f5cb73d9493","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendtrust-18.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendtrust-18.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4467390-f7bb-5ba8-ae1b-12a76e398c53","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendtrust-19.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendtrust-19.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a12e75-0581-5975-a5f9-0b0b9722917f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendtrust-2.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendtrust-2.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13c4c9db-7d44-5bc6-bea3-9eb4effcb2cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendtrust-20.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendtrust-20.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65942774-db8b-5a9b-aca3-606e5bb86fad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendtrust-21.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendtrust-21.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55449e44-0d82-53a2-b27d-0614642a3833","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendtrust-22.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendtrust-22.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2431cb44-5c99-53ac-b821-c39d25b53e4e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendtrust-23.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendtrust-23.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2732a53-480d-5e6b-ac21-ff4f92533606","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendtrust-24.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendtrust-24.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9392d96-0b34-5982-a3c6-c7211ffb13f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendtrust-25.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendtrust-25.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75913342-4487-502e-9cbf-d11ce8e6adfd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendtrust-26.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendtrust-26.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56de2636-83c2-53b0-803e-f6ec8fd1bf81","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendtrust-27.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendtrust-27.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--604cf1e0-35e1-50cf-a2c4-1a09e165b3fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amendtrust-28.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendtrust-28.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76a5b470-2874-5ca6-9c1c-73f3d9560816","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amensecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amensecure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a3ef36-6410-5103-a075-e3f7b2f10745","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amentielectronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amentielectronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f18c199-af8a-5c2a-a086-07e21a37c18d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: america-strong.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'america-strong.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbbe3b82-269b-5a61-af36-5c76f5408d8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americaalwaysfirst.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americaalwaysfirst.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61035744-b411-57be-a554-3a145cb2a8c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americabaseball.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americabaseball.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a785fcc-15bc-55e1-a479-a55525894c5b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americafiirst.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americafiirst.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e7aedf7-b6b3-52ff-9164-ae737c9359aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americafirst.army","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americafirst.army']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ef3948d-7b43-5c4a-b2df-99d9746b5693","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americafirstcard.services","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americafirstcard.services']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3abf9468-2231-56af-ac73-bbc43fdae381","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americafirstcareplan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americafirstcareplan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edb2c601-a780-5bab-bcc9-99a84a70d9de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americafirstdemocrats.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americafirstdemocrats.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7e26e6d-53df-5aed-980c-2bcfbe26cf04","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americafirstemail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americafirstemail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23bed39a-9c83-5d9d-9caf-aaa36a1484d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americafirstt.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americafirstt.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41156e13-2ccb-5c7b-ad71-28c5dc288de2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americafirsttt.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americafirsttt.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6925634c-e2bb-5677-80db-868fe477b92b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americaforpurchase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americaforpurchase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fe0fd4d-62ae-586b-a495-db492fc564ef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americagreattryagain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americagreattryagain.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ea144b7-65d0-52e8-8eb0-f1c20178db21","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americamustcomefirst.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americamustcomefirst.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a01166-8c8d-545f-ae9c-a934deb990aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: american-assassin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'american-assassin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86882d2d-89c9-55c7-a634-7338415e09c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: american-association-baseball.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'american-association-baseball.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8810f74a-c079-5025-9a88-7b4153d38330","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: american-first-finance.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'american-first-finance.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--497491a2-0ec5-5b97-a3fb-dfe3b37395c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: american-revolution.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'american-revolution.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97689352-9ff8-54fa-abb2-20bf5c053d73","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanabsinthe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanabsinthe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e312764a-09e4-56e7-9495-e0b6d3b201dc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanapplepie.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanapplepie.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca46ca51-d522-5ea8-8d13-0f9c6e3d557e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanastronautics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanastronautics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62bbfadc-aea1-566d-926d-5b3776ff79ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanastronomer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanastronomer.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--487be2ca-b127-5287-9b4a-f800819e9e71","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanattire.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanattire.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10cc1350-853c-5f19-bf3e-fbd4a6fde752","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanbaseballturf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanbaseballturf.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cfb3bef-05db-50fb-a678-02ca55a2515e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanbatterybackup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanbatterybackup.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dbe5f11-24e1-5100-ae00-0926238cb9b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanbatterybackups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanbatterybackups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02a5369f-6aa1-560f-ac11-c6b7c81f0464","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanbattleships.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanbattleships.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d33f16e-a30b-5f46-9aa9-15ecc58c25bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanbitcoinexchange.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanbitcoinexchange.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa2f9cdd-913c-5e07-b671-a53b2a0e4971","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanbitcoinpartners.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanbitcoinpartners.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36a60521-bd39-5311-99d9-7bccecf32841","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americancannabiscompany420.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americancannabiscompany420.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13fd2f84-c752-5496-ba9c-329650dba3d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americancitizenking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americancitizenking.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6083729c-257c-5ce0-b9a7-328f61825038","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanclassicssale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanclassicssale.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3479ad19-59ad-5fb4-a2d9-215da5776f42","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanclassicssales.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanclassicssales.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feb6e8e3-7856-5eea-b2dc-e17f4d4f8b28","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americandailydiscoveries.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americandailydiscoveries.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a011a71-9c55-58f9-b062-f20a498a77bb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americandressage.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americandressage.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d6ae45b-6768-5df7-a537-6c514ca05ecd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-a.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-a.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2968e67-3eae-5d80-8c31-806cffb003de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-ait.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-ait.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb8c032a-67d5-5ba5-a21b-75b9dc80d79e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-ant.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-ant.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6828114a-1dbf-5d74-b9f9-6dd23bcd840d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-articulo.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-articulo.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01e5df0d-a1af-59ec-ab24-93e6deb16da7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-at-de.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-at-de.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dc8f528-6601-5b08-b806-406dbe6257d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-at.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-at.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b0ed879-6065-59c0-b143-c19ae4669cb6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-at.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-at.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0021cb7b-4063-5fe4-8ffa-8e3e3b96ba10","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-ati.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-ati.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--033c2282-0229-59fd-8e0c-c0f7e67849e9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-att.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--624931a0-de01-5e10-ba45-b3d8519396f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-att.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-att.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2349689c-1dfb-5d1d-8c3b-8c3d5d46c237","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-austria.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-austria.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--441b0c0a-1610-55c6-a0c0-60cf0c1c8a55","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-aut.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-aut.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23c6c599-a4af-5359-a135-917162203c84","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-bonus.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-bonus.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b75f80c4-a445-59a3-bb20-5d6677fae0f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-de.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-de.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f79cb89e-74f6-5a13-a31c-fa817157d1c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-de.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-de.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f19e115-0fae-5886-b105-164929b3cdc9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-deu.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-deu.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13ea943b-4008-53f8-9c50-2ac2ef03210e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-einlosen.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-einlosen.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f626b4b4-272e-59df-827d-70fb7e2ad55f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-es.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-es.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e288de2-7e70-5488-ac17-4380333c6263","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-gb.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-gb.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0da3f31c-fe09-5843-b0ff-8a36e016f0cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-iat.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-iat.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecabd7e3-2e30-5dac-a273-87d4fd60eb26","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-ita.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-ita.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d927889b-8a23-5846-8722-083ba1660d35","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-jp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-jp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a4aa5bc-aeab-5869-9dde-e27e1e87323f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-laden.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-laden.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dbfca34-daa0-5d05-a22a-8594df42750c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-loan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-loan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--699db26c-a7d9-56a7-b139-ef40d7586e89","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-preis.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-preis.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53599023-eacc-52f4-9f48-fb78ca6ef3d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-producto.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-producto.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e1a7e93-abc2-53b4-a8a2-c2822d73acbb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress-ware.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-ware.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b407393-2d5d-58db-9763-ccca640034d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress.art","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress.art']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1db49c7-59e5-5e60-9ecc-150b87c0e9db","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpress.blog","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress.blog']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33b51dc4-cfbd-5b95-b4c1-ecc4afa40102","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpressafekey.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpressafekey.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--024ef6cc-de74-54a6-b2c0-b908dedacc19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpresscardconfirm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpresscardconfirm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a0b27e8-79d8-5887-b740-66cd2f105047","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpressnotification.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpressnotification.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c573ca99-ebaf-5cce-819e-f1e73fa7bcb9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpressos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpressos.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfddf8d8-4e12-5e7a-9339-5ae0118092db","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpresss.services","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpresss.services']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--878e46fa-ecb0-56e5-8174-1d9234f1a112","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpresssecureportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpresssecureportal.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87f9247d-9d12-5744-a5be-5d00443c2c37","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpresssellnow.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpresssellnow.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d9fc548-a244-5805-a890-3a0bcf339f85","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanexpresssshiping.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpresssshiping.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15d1dc9d-9524-5e8c-991d-325a8e8c3323","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanfarmlandinvestments.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanfarmlandinvestments.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e23d58d-7ed5-52ff-907c-7042208377f6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanfarmlandinvestments.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanfarmlandinvestments.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55ec9527-86eb-5c2d-bab4-6ca3b982a7be","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanfarmlandinvestments.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanfarmlandinvestments.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--894a3d3b-cee0-5202-bab3-676b3f26625b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanfireclaimadjusters.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanfireclaimadjusters.biz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7434027c-6cc6-5d77-85d2-12959c2c42f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanfireclaimadjusters.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanfireclaimadjusters.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4abd0f7-35f0-5de1-a446-67405b727e48","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanfireclaimadjusters.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanfireclaimadjusters.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ed439e5-45b4-5889-b0a4-2fe15f406380","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanfireclaimadjusters.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanfireclaimadjusters.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71693b03-935d-5784-814f-3e6d50fa92b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanfireclaimsadjusters.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanfireclaimsadjusters.biz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7952424-5e45-5476-a548-15d3ab80b04f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanfireclaimsadjusters.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanfireclaimsadjusters.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b80d2627-0a56-5f3d-aec7-a834c64ad7a6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanfireclaimsadjusters.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanfireclaimsadjusters.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be618acd-0918-5550-85f3-ad00917865ec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanfireclaimsadjusters.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanfireclaimsadjusters.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee7abff-ee3c-552a-b7bf-e125d25054f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanfirst.art","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanfirst.art']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8211a254-d18a-58be-95fb-ea07b7df036a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanfirst2024.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanfirst2024.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b943ef0-cc77-5304-8974-9c201ebb25ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanfirstcapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanfirstcapital.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6142df0b-561e-52d2-8a3f-5685e9ad03c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanfirstclass.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanfirstclass.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eac2e72-6c90-5e0d-aa60-f12b56f73ead","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanfirstsupport.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanfirstsupport.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65a76082-f29f-5892-b271-667c342b49d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanfirstt.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanfirstt.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a59f46ab-b354-5202-9ee0-4607b5c48a6e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanforex.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanforex.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8bd4a38-dd2d-5cdb-9af2-158dbff5ad31","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanforex.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanforex.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a605972a-563a-582d-9c53-0d99a902ef49","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americaninterfidelityexchange.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americaninterfidelityexchange.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b172e73-0b9e-563e-a961-c2228749402a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanmassagetherapyinstitute.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanmassagetherapyinstitute.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e199e048-0e24-5904-8b48-728e91bc8d8c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanrevolution.rocks","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanrevolution.rocks']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55b627b8-ca19-50cb-93f3-c3627310c1fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americans-farm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americans-farm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c947ec97-3ff9-5afd-a493-f2814cda86a1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americansclassicssales.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americansclassicssales.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74ca0f47-8ed7-5003-86d9-e204db56a64e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanscreentest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanscreentest.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5f2575a-ef6a-5981-b6b5-7d14ae0c954a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americansdiscoverycapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americansdiscoverycapital.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e85ab2f9-45ab-5e84-8f9c-f8272c05a6be","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanvisaexpedit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanvisaexpedit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--097a629e-92c3-5514-a0fb-dee8f6c488ff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanyouthbaseball.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanyouthbaseball.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3d48d7b-6e99-5c04-a5f1-69eaf06a784e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanzodiac.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanzodiac.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27fa42d5-8480-5f59-87e8-265cc1053e0f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americanzyn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanzyn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d1ca712-59b5-503c-8060-aa4ebc5c92b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americasfirst.email","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americasfirst.email']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51631986-1f60-521b-aa35-bce3b3c8ffa9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americasfirstemail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americasfirstemail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b414c84-03a1-553b-b430-febf66e3732f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americasmattressjohnscreek.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americasmattressjohnscreek.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--951aecbe-7931-59a4-afff-ae307f551874","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americfirst-help.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americfirst-help.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--764babb8-9118-5d7e-bc5f-711e5d7033ea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americlaimwi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americlaimwi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85989b61-f194-5796-bf88-8a841e27e04b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: americrypto.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americrypto.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c620bcd-a931-5ab7-bac0-271ac008a483","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ameripcrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ameripcrypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9fd8ec7-8053-5579-8746-d010d8b2ccf8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amerissastudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amerissastudio.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--227d85a2-1c9b-5a55-92a6-15cd94aaa154","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amessage.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amessage.biz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--416d81ee-f0e0-5430-a919-4aa510d08115","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amessageforthehumanrace.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amessageforthehumanrace.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad9ce234-1e71-5c63-bba5-fa7621779c7f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amessageforthehumanrace.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amessageforthehumanrace.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e883fe5e-4da4-57ed-a9ee-9a652d97f1b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amessagefromteenahughes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amessagefromteenahughes.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74e537ee-2ab8-5050-897b-f61e3c673bb7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amessagetocongress.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amessagetocongress.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--891eb186-bb45-5b36-bfea-1698ee8bedde","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amessagetothepresident.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amessagetothepresident.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be5f820d-d7df-5e39-a8f9-1d79d269f8a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amethystsuites.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amethystsuites.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e80fb0f-8eff-5375-b9c1-b2523d9bee33","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ameverify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ameverify.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e695b13-de04-59e3-bb34-41006d5c52bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-austria.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-austria.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c57af37-ab84-598f-b2ef-6f79c8b6059c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-austria.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-austria.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4430506f-4144-5785-8bab-b505769d01b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-business-cards.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-business-cards.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b8bc7c9-d9d9-53a3-ae4b-1e972dbe710f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-business-gold.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-business-gold.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f50e5a27-fbb1-5eb8-8688-6776824c29f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-car-rental-insurance.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-car-rental-insurance.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92f03c91-bab9-5a3b-a2f9-8d1dc81e90a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-cards.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-cards.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ec2abfb-a79d-50f4-9dbb-b5f013db7ce3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-cards.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-cards.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36b7413a-0b02-533a-add8-b9f67a0caa1b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-checking-account.bar","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-checking-account.bar']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cbfc42e-c03a-5f70-8cbf-53828a20f85a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-checking-account.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-checking-account.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad1dd94-8feb-5247-baad-b872fb62588b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-checking-account.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-checking-account.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76bf8d4e-1489-5f68-9e10-3366865019f5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-credit-cards.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-credit-cards.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3f675c8-aa93-5a32-808d-fdcced250169","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-germany-at.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-germany-at.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd70efb9-904b-58c7-8bb6-881ac6ce077c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-germany-de.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-germany-de.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b26c4fd8-2187-517f-9f31-f42d3ef1f171","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-germany.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-germany.vip']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd6d82e5-e261-556e-a0da-21b7e4fc8435","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-gold-annual-fee.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-gold-annual-fee.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cec9b59e-1746-5fa8-a941-cb880b7762c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-gold-benefits.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-gold-benefits.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3be25c52-2170-5f8c-9c29-9105fde41acd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-gold-business.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-gold-business.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--238cbab2-4b13-58e1-9995-dcb6fe2e2ea5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-gold-card-annual-fee.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-gold-card-annual-fee.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62312729-4b98-5707-9718-72eb38e4f640","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-gold-card-benefits.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-gold-card-benefits.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe10349e-07e1-50fb-ae60-2f464d6daee0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-gold-card-benefits.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-gold-card-benefits.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97ba0cf5-818d-58c0-82f5-c1a1d9fb108b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-gold-card.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-gold-card.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dc627ad-288d-5e88-9795-42457d4c38cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-gold-card.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-gold-card.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e67abf94-f35b-5efc-a6d7-c8ace55adc0f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-gold-perks.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-gold-perks.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ada874df-7f3c-51ce-a52c-b87f398b983d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-gold-vs-platinum.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-gold-vs-platinum.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3848dcbd-8b5c-5f0d-a80c-8235a93a8574","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-gold.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-gold.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d81c726-3919-551a-8ad8-feb8d2aeeceb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-gold.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-gold.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3562a99b-fd07-5ef8-9362-26213f50099e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-high-yield-savings.bar","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-high-yield-savings.bar']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--327be2c9-3936-513b-8e6f-5b033b33235b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-high-yield-savings.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-high-yield-savings.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db9a4616-3568-5232-823e-95e9f5784d49","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-oesterreich.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-oesterreich.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d5102d4-17e9-5b58-b6a4-5057b9e4f61e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-personal-loan.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-personal-loan.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0001d5f2-c7fd-50e6-88fb-66acbed1b7cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-personal-loans.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-personal-loans.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5012af0f-2f16-552e-a90e-09152e615e14","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-points.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-points.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75ac0499-dba1-5d69-b6f7-c50e997e0083","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-private.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-private.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bc92623-24b5-5c9f-b62d-186d9f841683","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-rental-car-insurance.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-rental-car-insurance.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20bf73d4-725b-5335-b826-f6c641cb764d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-savings-account.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-savings-account.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f529b5-a461-5441-88b5-0ed78201d34e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-savings.bar","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-savings.bar']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f3229d-bafd-5919-8a10-5025e440965f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-savings.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-savings.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7469078d-362e-54ff-9ca8-2cc05d0d2327","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-transfer-partners.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-transfer-partners.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fe3c222-7f7e-57c3-afa2-5ff1706735df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-travel.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-travel.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88f9e62c-8d7a-539f-9dfc-46554ebd620b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-travel.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-travel.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfd14b16-8e06-53e6-a348-d777cc60c2ad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-ts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-ts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8192545a-f6b0-5ca3-b21c-7be533f6ec5a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-white-gold-card.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-white-gold-card.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--909e5c57-b124-52df-9e52-605cdd2ee380","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex-white-gold.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-white-gold.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01f545ea-e988-53a7-986d-ffec2d20e07d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex.ooo","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex.ooo']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2061be82-adb0-56eb-97bb-4fd5662f1397","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amex409.monster","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex409.monster']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fc804c4-5bcc-566d-bac8-5ded4765a5ef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexaclaraciones.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexaclaraciones.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efc42dbc-090c-57ee-982c-35baed8aa874","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexagroup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexagroup.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d65c42c-439b-55ac-9865-0791b8bb9635","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexautoinsurance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexautoinsurance.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d196a3f-02de-5ce9-94da-1a3b88c6ef90","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexcardhelp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexcardhelp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0398e6e7-fb3d-53d4-807d-aeb0dd3010ea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexdeliveries.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexdeliveries.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ec9b91-fea6-5a26-9eae-a36fa28f9c60","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexdeliveryservice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexdeliveryservice.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b79379ad-f7b0-553e-bda6-e0367d2246b0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexerrorkakunin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexerrorkakunin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e185020-42d6-5f52-a65e-c191ede9c7e6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexgiftcad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexgiftcad.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3ff4f40-5d2a-5112-879d-53e8cddbc9e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexgiftcard-balance.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexgiftcard-balance.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cae5be99-6dba-5142-bf01-763a159a8ac8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexgiftcardbalance.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexgiftcardbalance.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc121865-6215-566a-9c6c-b8a8d52ed322","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexgitcard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexgitcard.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c452de4e-95d8-5d75-82ba-340683372bb0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexlogisticservices-co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexlogisticservices-co.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b910900-2f1b-5f53-af88-8954aabce4cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexmeyucatan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexmeyucatan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46b46b19-d896-50de-a15f-a8ab86432294","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexmeyucatan.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexmeyucatan.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a252e25-e3fa-55db-8af7-73e7ae52db00","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexonlinetinchapvn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexonlinetinchapvn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e60004d-e9cb-5084-96eb-564654e19ed7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexorlivq.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexorlivq.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4811c4b1-ea62-549b-bbb2-409eb8f27515","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexp-couriers.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexp-couriers.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--406bdbb2-993c-58b0-99d0-c8fc09c11270","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexpress.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexpress.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cfeb28d-515d-5152-a69b-7a5149769dee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexpressautotransport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexpressautotransport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c57a4f73-c6eb-5754-8b2e-b9f58da3d60a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexqthanh01.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexqthanh01.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0ed366b-1055-5de9-a65b-f71dd80d59dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexschedules.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexschedules.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b008f2d-0b87-53da-b353-1dc2d0d869ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amextealm.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amextealm.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e7be4b2-1ecf-5157-8c84-05051f47b7a7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexteam.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexteam.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85f807e6-35e1-53ca-9691-575e227cd474","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amextinchaptructuyenvn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amextinchaptructuyenvn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bac2e73d-8297-541a-a885-8e446c07ff60","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amextrustlimited.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amextrustlimited.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f151eae3-1983-5b01-a2f7-cba02d20e7ef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amextsapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amextsapp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6059043-7cf0-536e-8390-9e8580e1299b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexus.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexus.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5dec8de-6849-5e12-8e7b-3db62472f655","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexverify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexverify.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e5ad92c-ab60-524e-be51-c71bf0e408b7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amexxxcenter.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexxxcenter.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b177d69-d982-592b-b67d-62bfdc3312c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amfamsolana.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amfamsolana.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e4ae938-8bf0-517e-af1b-61da11faa5de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amfashionable.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amfashionable.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56bf5748-b630-5f91-a1ff-3cdde8397232","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amfikyoksuzbonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amfikyoksuzbonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--609bf827-b9f3-5774-b9f9-d05a6eec3694","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amfirst.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amfirst.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--747b0c7e-7526-51c4-ab04-c724abcfa912","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amfmintl.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amfmintl.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--650d167d-ec21-559a-9c37-ba3011c7e1ac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amiableattire.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amiableattire.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09460d98-8c38-5786-8ead-8dfc171b2395","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amiablegreenfarms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amiablegreenfarms.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b173e69-57cd-5f61-85a7-f60516c91cb6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amiablemeetups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amiablemeetups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--712cc169-7a90-52db-b3e0-f772a232d4f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amiablesuit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amiablesuit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a3a0f8a-0e85-5edb-a422-c1743bb55ab2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amiallyourbaseornot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amiallyourbaseornot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f21e859e-6830-5f5a-87bb-35fa95477e05","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amicaclassaction.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amicaclassaction.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--422a8879-e660-5c49-9a91-abcdb3439998","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amicitia.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amicitia.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2517ff48-3c26-510a-a607-50593ebcbf6c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amicitia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amicitia.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15055a05-6a0a-5628-b71b-fe7a5ffd1e60","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amigapersonasenlinea.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amigapersonasenlinea.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f639e107-c3a1-536e-be11-37282aca9766","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amigo-token.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amigo-token.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37ca10d5-a79e-5837-9e39-a4f86a982f45","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amigoairsho.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amigoairsho.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--413ee44f-5b2f-5de4-9821-457a1450e73a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amigurumicrochetpatterns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amigurumicrochetpatterns.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--721f2e0c-58a8-5b70-9b7f-c951ecb9cdcf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amigurumicrochetpatterns.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amigurumicrochetpatterns.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a016bce-fa86-5516-b5e9-cce0baa5f3c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amigurumidollpatterns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amigurumidollpatterns.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1353d78e-a5c8-563c-b506-f161281f106c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amigurumidollpatterns.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amigurumidollpatterns.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0f8b63-9fbf-5e81-9414-4d9bb855fb94","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amigurumidollpatterns.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amigurumidollpatterns.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03d2c6a-a3f2-5519-b170-bde5a6647474","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amigurumidollspatterns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amigurumidollspatterns.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b88507ab-b934-5ac0-899e-bc77b4a380b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amigurumidollspatterns.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amigurumidollspatterns.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--627909b7-9ac8-56a4-9a98-e360efef81cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amigurumidollspatterns.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amigurumidollspatterns.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7798dbd5-c73a-5ef7-9412-b1987926fffe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amigurumifreepatterns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amigurumifreepatterns.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a82c1f7-9076-5c0d-9e1b-a02822d33f65","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amigurumifreepatterns.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amigurumifreepatterns.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b434fbc6-4484-508d-b0a9-21b6ca7b8139","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amigurumifreepatterns.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amigurumifreepatterns.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ff69ae9-12c4-501f-9ca6-c6492502aae3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amigurumipatrones.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amigurumipatrones.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dde88e08-07d8-5c37-9976-7ec0e87253c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amigurumipatrones.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amigurumipatrones.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f730d7c-fb5a-5e94-89fd-cf86ccd5bb6d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amigurumipatrones.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amigurumipatrones.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fefa8d96-5780-57a6-84d7-2592fcaf08b7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amigurumipatronesgratis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amigurumipatronesgratis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e14f3542-37c5-5b28-81ed-ccb2eba12bd4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amigurumipatterns.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amigurumipatterns.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a305bf86-df06-597b-9aa3-26c5d087fb04","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amikatattooing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amikatattooing.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92155158-0e06-5e99-bfea-51a918414e08","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amincrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amincrypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a566dd9f-db09-57f7-8d5a-9db57b4e9f26","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aminelectronic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aminelectronic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa16f31e-46ce-58ca-94c5-a9637d602eb6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aminelectronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aminelectronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856da8fb-f6f5-58f5-a3a9-b728733ab470","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aminelectronix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aminelectronix.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e6aa39f-194e-56ae-a79a-72abade92032","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aminfarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aminfarm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c9f2022-ad09-5e05-a63b-4bff5d415324","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amininteractive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amininteractive.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4e6571c-6502-5c84-b111-3c079ebb083f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aminnabakes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aminnabakes.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceb4dbf1-3ac3-53ad-b81d-9194b8eaa0ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amint.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amint.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f81c6861-ff27-5582-b6ae-5bb3b10cf325","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintea.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0dfac66-af75-5b92-8847-4f814c0d4fc4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintechlab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintechlab.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a8d518d-ff61-596a-a44d-8e18053f12bb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintechnology.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintechnology.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eb1c491-fa3e-5e87-9e86-35f358735bf6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintelecom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintelecom.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd78aa10-f4b4-582e-9e65-9bae1f995129","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aminteleport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aminteleport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbe51966-ad84-51af-b688-7aa34379354d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintelevision.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintelevision.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08dd6e5d-d5e4-54df-b80b-5c0b3a0f345e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aminteriorshindupur.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aminteriorshindupur.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4887e5a0-7e5e-5e12-9573-a03fa52c6b8d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aminterlors.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aminterlors.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3348b610-6440-5e2f-b1d6-a684a3759f03","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aminterors.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aminterors.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4b68260-8255-52c0-8012-ea40dc85490f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aminthermo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aminthermo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5db68646-d1a5-53a9-823a-1a0e15b7f79a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aminthread.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aminthread.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1be3b5a8-1876-5a9d-b9ab-329862a1dba5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aminthreads.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aminthreads.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7967d504-433b-5a72-ad12-5d626b2cf3c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintime.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintime.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--859471ec-4f4b-587a-9656-c51e644dd8bc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintiridinromania.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintiridinromania.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14d64bc8-5fc7-5aa7-9380-3c161d07c78a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintorepeluso.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintorepeluso.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--831ddc65-a278-5b91-a295-4fbf0c1650de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintoto.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintoto.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d78e95a-b378-5033-aa6f-8fbca1a96746","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintoto88.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintoto88.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--071fa2a8-866e-5d3a-9ffc-b4953b998eca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintrack.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintrack.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d71ce67-249c-5a40-80b7-6f34e35345c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintracking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintracking.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d498f9c3-7212-5c60-b6f8-4e2bd0dc851c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintraders.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintraders.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05002366-ab57-57ee-9a32-f231c4344765","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintransit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintransit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06c2f304-945e-5ad2-b1d7-3343c4550ade","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintransport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintransport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--443a9a9b-6ec8-5cfd-aeb9-2ec3f27ab026","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintransportation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintransportation.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99208c0c-fa62-5069-a4f7-c8e8d4756d92","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintransporting.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintransporting.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72e9d919-5741-5708-a135-602d978e3d85","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintransports.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintransports.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--508293f6-a1df-50d8-9542-68506d301321","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintravel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintravel.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d932bb54-ab33-50ce-ad00-1a749dc3f422","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintrip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintrip.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56f005e0-a389-57fa-ad4c-66f9903a732e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintrucking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintrucking.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--047bc3dc-921d-5fb6-aaa9-8b1109e06b95","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintrucks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintrucks.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--343fcbab-0116-5ddf-a5a4-ea6a0000794d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amintv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amintv.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab3f2cee-8aeb-5bd1-b461-9ecc11432d6e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amiotron.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amiotron.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a7db5a3-ef94-5ecb-94cd-49bdc70bf207","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amirattarzasil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amirattarzasil.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfb1830e-11cf-5102-b6fd-bd64aa8e95ec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amirs.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amirs.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8e55f25-7ecf-553d-af74-e1a203e5b6ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amirsaghir.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amirsaghir.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6ad4a53-33d1-5dee-931a-5a2a6fdf8564","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amirshefamc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amirshefamc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b423a82d-a405-521f-b6b9-c32a91e2ec4e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amirsherazi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amirsherazi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72118045-e294-5374-9d02-8cb0ab8ae3db","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amirsoltanijd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amirsoltanijd.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38b5e6f4-b3cf-5c01-9698-0a221abcd52f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amirsoltanijd.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amirsoltanijd.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e05ed438-f8bd-5d61-a1a9-e620d7f4ce26","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amirspume7.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amirspume7.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a0b78f6-e776-5b0d-9e3a-84dfbaedf038","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amirsuite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amirsuite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9426e646-cdde-5795-9b41-830059eaf5d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amirsultan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amirsultan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a684bb68-e421-583d-94ca-4814cc07654b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amiwalletcheck.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amiwalletcheck.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--800c9632-d827-54a0-8a1f-5658901dfb7b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amjbc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amjbc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cb91db2-cf4a-5c9a-aa37-a286ac34fc77","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aml-binance.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-binance.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1f80dc8-53fc-5a50-bd3e-63ad20e43d42","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aml-binance.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-binance.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5cb27e5-681d-5a9a-9bdb-be1f2828a6b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aml-binance.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-binance.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4d448e5-6cbc-5e82-baa2-9c4f1a88d441","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aml-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7a91abb-1426-54f2-af65-b30f082a92eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aml-crypto.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-crypto.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e9715ae-1558-5f49-883a-38fe0dfb1c69","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aml-cryptocheck.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-cryptocheck.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef7ff6e0-0acd-5ebb-95e0-d8ab6831c210","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aml-cryptocom.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-cryptocom.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4c31476-8d21-5555-a9ff-2bf392ab6807","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aml-finanz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-finanz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77d7321d-4d3f-5eb1-893a-261a35b74820","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aml-kraken.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-kraken.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4283f045-8082-59c6-bb7c-1491b6c8bcfa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aml-secure.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-secure.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b3da0a2-a83f-53d8-87b2-662ff2cf04b9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aml-team-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-team-crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--949e2abd-18f9-56ad-8d78-2fbb3db1627f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aml-tron.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-tron.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--889c99a2-68f9-55a2-9b7f-0ac039cb4ab6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aml-verify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-verify.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d9b8153-8f99-50ff-9578-c90b3f7fa4d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aml-verify.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-verify.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--385b5b94-9586-5447-8f0b-c15741f064d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aml-verify.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-verify.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9bc7afc-1c3d-5d71-b4cc-650041682ac8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aml-wallet.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-wallet.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0859ad4-1f60-5b81-a99b-44298a2b5d55","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aml-wallet.report","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-wallet.report']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4b90f79-5508-55d6-80ad-4f0c6ebf0cc8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aml-walletcheck.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-walletcheck.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--108f0c93-fd35-5cf5-9ceb-17d41acdb3d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aml-wallets.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-wallets.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4c07e00-1738-5517-88b5-b390e07d9327","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlacrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlacrypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99a41305-0cb0-53d1-91f3-38fc813d836d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlactinussale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlactinussale.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--becd78b1-d28b-5d84-9305-9b710f36aae1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlawallets.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlawallets.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e17ebaf3-e965-5b9a-a6d2-3d8937a75d06","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlbinance.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlbinance.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4dd3d62-730b-5087-9936-eec54cb4ba5d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlbinance.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlbinance.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd021642-01f8-5a75-b412-9b949618eebb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlbinance.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlbinance.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e274d44-7f76-5330-94e8-ad3e9bb09f6f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlbinancetrade.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlbinancetrade.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7739363-4b2d-5ffa-9e3b-1eb535e9325c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlblockchainsecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlblockchainsecure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55ddea27-d363-5c1a-84cb-00701f883ed2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlbotbybit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlbotbybit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--799ef5b4-aead-5e41-b39e-84ac780f5a5d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlbotsecure.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlbotsecure.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f550a86-ed46-528e-b78e-9aba05499c80","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlbybit.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlbybit.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--916c9a98-35da-5db1-8002-cbf3afc632f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlcheck-atomicwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlcheck-atomicwallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b21114a-b1d0-5143-bfc0-4349730a31a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlcheck-trustwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlcheck-trustwallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de52903f-58ef-5aa9-bf48-6d6e52223506","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlcheckswallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlcheckswallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7696084-c557-514d-8534-78acfa2fb5f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlcheckvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlcheckvault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c8f8912-5479-52ae-8ce9-8f870d2d46a9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlcheckwallet.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlcheckwallet.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba500eba-4f45-5f57-a02b-2bb45b2318cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlcheksecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlcheksecure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--467956cc-0741-5892-b77d-9724c9b4cace","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlchekverify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlchekverify.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--007b64c6-2ca4-5c6e-8331-f9841807c247","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlchekwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlchekwallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eab6564-6d26-5b0e-94e3-ae9edda2d9c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlclaim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlclaim.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3ad31c5-eddf-588f-acf1-1767b1c9d6f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlcrypto.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlcrypto.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ae554b4-d9c5-5530-9a23-6646bb589349","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlcryptocontrol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlcryptocontrol.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c937e8fb-af21-59f4-a6ea-05a282fb9f8b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlcryptoeu.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlcryptoeu.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50481c87-f989-513e-a205-7b30d6e6b0da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlcryptos.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlcryptos.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af6496d9-6f08-5f09-80fe-521ad103a7aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlcryptosupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlcryptosupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d077d225-02c5-5bbd-b80c-f9aed8c5fcdf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlcryptotest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlcryptotest.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8402690-9f25-5d87-9360-7c3f0513e87d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlcryptowallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlcryptowallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7345dc9b-9fa6-5ba4-9d2b-a8751faf23ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlcryptoweb3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlcryptoweb3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf429306-27a3-5508-9882-120ff3ed6682","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlescrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlescrypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6586f2a-da35-5f1e-ac29-690bb3980f43","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlewalletcheck.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlewalletcheck.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79e2fc5c-029f-5b98-8821-9007047ab462","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlnab.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlnab.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7eb8fc5-4107-5232-8cfe-95d91b59d9cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlofarms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlofarms.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dab6f0d-02dc-5208-9379-331e6606c22e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlriskweb3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlriskweb3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb5cac8d-ec0d-5b7b-9062-6e9801d94ca8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlscanerwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlscanerwallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--985ada36-1abc-56b2-a82b-1d608595a908","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlscannerlwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlscannerlwallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cc49689-ca69-5e66-a919-31cf732ff264","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlscannerwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlscannerwallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de77198c-a2ed-500a-add7-d1263f34256f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlscansecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlscansecure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d413231-748f-552c-9832-5c403626fd2f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlscanwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlscanwallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01f2e88c-6ed8-5a70-b7d9-3e9af914a3d0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlscanweb3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlscanweb3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96513a58-1691-561c-a49c-ca0e72b9a199","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlsecure-com.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlsecure-com.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceaf6c1f-3fdf-5ade-8332-ca127239d48e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlsecure.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlsecure.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7c61491-4db2-5d7c-a8a1-67c3bdafbf30","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlsecure.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlsecure.cloud']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aa149ea-1173-512c-b179-484a05ab1768","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlsecure.expert","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlsecure.expert']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ec7affb-f8b6-5d0c-8f98-624f4b076a9c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlsecure.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlsecure.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e5784e8-048b-5a53-9cd1-5d1a6811ef52","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlsecure.onl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlsecure.onl']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14699ec0-c9d6-51f3-8144-b9a41a9c4322","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amltestcrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amltestcrypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7de0cccc-e923-556b-b797-0000da67f7f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amltestweb3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amltestweb3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e3e3260-2fb2-51fb-8f22-6372304b4fe6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amltrustswallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amltrustswallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ed25eeb-03f6-5cd9-a269-ad0cf23c78f1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amltrustwallet.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amltrustwallet.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2251572-fc56-5cb0-a407-e28dba763856","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amltrustwallets.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amltrustwallets.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fecec6fc-5e92-5874-bf91-2e8667c01808","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amltrustwallets.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amltrustwallets.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f806017d-bf3b-56e3-9df9-3923e684e960","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amltrustweb3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amltrustweb3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2189bfb0-b663-542d-bf62-7a23a77e2545","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlusdtwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlusdtwallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7a9e6d4-d3ef-5749-b6bf-6ff063d6bcb9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlusdtweb3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlusdtweb3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13634cb2-a26b-5e4c-89e8-9d7a85b30bbb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlverify.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlverify.club']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59df0860-572a-5db1-ad9e-53d9ba49401e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlwallet3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlwallet3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46fa27a7-d5c4-5d8a-abd4-64588c44d817","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlwalletapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlwalletapp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6308fb32-cd50-56f8-b4c7-f8f26d87b3a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlwalletbot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlwalletbot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ef0334d-4cad-53e8-befb-f456c090cb29","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlwalletcheck.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlwalletcheck.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--932959b5-6d70-539b-b27c-c5d41e3fd9cb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlwalletcheck.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlwalletcheck.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba5c9f69-6d7b-5469-900d-77208d9b1153","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlwalletcheck.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlwalletcheck.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5e20aa-c234-5e52-975c-c46e140c2fbf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlwalletrisk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlwalletrisk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bf5d2a8-09fe-5b0b-b67e-10db2d53df33","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlwallets.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlwallets.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c44e3142-9b00-53e1-b4d5-3ea5b24c7f41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlwalletscaner.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlwalletscaner.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd674ae2-b4b3-5fc2-80cd-7df01eea3d01","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlwalletscanner.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlwalletscanner.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40561866-8860-578d-b7b6-724c92348f48","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlwalletsecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlwalletsecure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1d4ac41-1875-5550-9ad1-0b0fea4877d3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlwallettest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlwallettest.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f11c6845-3235-5023-a55d-f38fe3627678","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlweb3.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlweb3.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3809ac6-e4b8-562f-9544-4bc51e266dbb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlweb3analytics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlweb3analytics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49d72714-1fdf-5766-922f-fa713edf18c8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlweb3app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlweb3app.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23479963-0cd7-56ab-837c-dd0c878eff16","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlweb3bot.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlweb3bot.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--250eea9d-40b7-5cb6-a9eb-e3d4727881dc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlweb3bot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlweb3bot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4fb6752-9522-5b7d-93fc-482392e15316","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlweb3crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlweb3crypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85275778-5acd-5357-befe-9dfe6cad2d74","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlweb3pro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlweb3pro.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72418930-54e7-5094-9a27-e5b5c185aea0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlweb3risk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlweb3risk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44751764-17f8-560f-9e5e-62930652dfca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlweb3scan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlweb3scan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f714cb7a-473f-5e24-92e6-f6e21b6fa2bc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlweb3security.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlweb3security.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4df4a299-5c7c-5f78-b531-4a6a31c69956","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlweb3services.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlweb3services.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da1d81d5-becd-515b-9cf0-ba2494bd57ad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amlweb3test.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlweb3test.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--652a9cb0-d5a9-5af9-8dd7-9bd37df72bc9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ammqgroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ammqgroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c479bb52-3076-5d12-81bc-e9a43bf2f511","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ammucare.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ammucare.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d2e2de-8ab0-5206-bad4-f14c82bf11bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amnattuankhiao.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amnattuankhiao.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9c9cee0-f781-542d-a9f0-25dbc1da7a08","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amnattuankhiaoengines.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amnattuankhiaoengines.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e60713a5-44ed-5fef-b6c5-e6b9e8eeb7cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amnetflix.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amnetflix.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b0bca31-e444-5326-a4cd-c356c12b3d40","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amnor-groups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amnor-groups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f407565-7126-5c4e-b4f9-76f683a022fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amntx1.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amntx1.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1f13fb2-0040-589d-9261-71aa11178cef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amodelcrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amodelcrypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5be6be4-793a-5b38-b538-97b3282f54f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amodernapproachmassage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amodernapproachmassage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4634307-990a-561a-aa37-6f8f47eb24c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amomsguidetocannabis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amomsguidetocannabis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--864038c0-c28e-54ba-b4a7-88161028893c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amon1.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amon1.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3ea9056-7fbd-52f0-b947-dc674066387a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amorcar.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amorcar.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--301f05be-adbd-5a2d-b638-e32981f24c3c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amorcasual.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amorcasual.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d92305c0-7af2-56ed-b68f-aa77523148b8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amorcatz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amorcatz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46e97875-85bb-5c1b-8aaf-929177b5a74b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amoxicillin-onlineamoxil.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amoxicillin-onlineamoxil.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48d5f62d-eb37-5192-a7aa-ce4a6a532518","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amoybatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amoybatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e7fd34a-e270-5be5-ba2e-e3ec1a2561fe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amparenabet168.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amparenabet168.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cc76524-84b7-58a7-b34f-6a3faff4fb75","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ampbonanzaslot88.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ampbonanzaslot88.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b658bf0e-8598-5c6c-be45-6a483c05ce98","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ampbonanzaslot88.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ampbonanzaslot88.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e182bdda-8015-512a-be83-e7c18cca3b37","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ampbridge.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ampbridge.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--205d420b-3165-55d6-9edf-ec280fd5f1f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ampcairslot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ampcairslot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29d0f2b5-7c4a-502c-bc0e-6d8c1b85ca45","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amperebattery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amperebattery.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b47ff0ef-1abf-5981-aa21-05433d927fe1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ampereelectronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ampereelectronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b51e8e00-1822-5292-83cd-73568d5c9624","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ampereelectronicshub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ampereelectronicshub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8af133a3-8e44-58e2-8819-b808d6c36c5f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amperse.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amperse.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebca5219-fdf4-5ef0-b89c-d72c3359ed08","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amplifiedcannabis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amplifiedcannabis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7359d93-ecec-587b-82b8-558978ac409e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amplifyhairstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amplifyhairstudio.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--701eef9e-6188-529c-87b3-85f37ec8ca6e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amplifypublicaffairs.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amplifypublicaffairs.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad2d492f-03cb-5fa2-9238-216c9e83802f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amplitechgroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amplitechgroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab57ba06-4fb1-546c-9872-0ce9fc554dee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ampropertiesmallorca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ampropertiesmallorca.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d989be3-393e-5faf-aa15-f6a266b941b7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ampsentrixargentina.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ampsentrixargentina.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e960f0db-94b0-5933-8d07-8966ea9a92a3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amptronix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amptronix.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--831d3e69-ae56-58a7-bbbd-f5d5121cf9e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amritsarfirst.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amritsarfirst.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c111aa0-305c-5d20-b2fa-53b27aab4d56","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amsterdamexpress.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amsterdamexpress.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03866670-30a3-5405-8643-f3d060a757d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amtassociates.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amtassociates.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8ba89bd-d9a3-5812-ba67-d553fa8c4413","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amusementmobilema.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amusementmobilema.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c16395c-2490-537f-a8a2-41010414165c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amywatts.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amywatts.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac931de2-884d-526c-a1cb-ad9a477fe79d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amzattelecom.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amzattelecom.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f0ac2a7-a8e7-565f-ad0e-a12927c55234","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amzbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amzbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a8bdbf0-8d77-59dd-97e8-aa243d618bd7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amzdiscover.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amzdiscover.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e7d6562-ccf9-519c-a638-3ae26d8a5ac9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amzlsh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amzlsh.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--534866d2-9789-5d84-a3cc-3f4200753120","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amznamazon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amznamazon.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89733bbf-75ca-5789-8490-12a0fef374f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amzonverify.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amzonverify.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--522dd0b3-0d9a-5312-a70c-92ed14837a83","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: amzsupportgoogle.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amzsupportgoogle.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4702511d-5a0d-51af-9e94-f654e49964d2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: an-noticeable.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'an-noticeable.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b489870-8a03-5f4c-afef-50f65b9cad86","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: an-update-on-our-family.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'an-update-on-our-family.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b0d4c65-86df-5fbc-9b4c-85fc9d6a1e1e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabahisgiris.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabahisgiris.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98855178-2184-5205-8472-aab0071f18a5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabaptism.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabaptism.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e28b66-df70-5193-890f-da0c0cc1a869","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabaptism.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabaptism.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b30bf22-0bd6-5136-8867-948688331e15","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabaptistfaith.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabaptistfaith.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f294a5a7-83f1-5fc8-b64c-2e0d3679cbb2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabaptistfellowship.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabaptistfellowship.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea6dd9d4-458e-5c53-9642-2bbc2a98462b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabaptistry.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabaptistry.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bb6c1c7-8831-5b42-b7df-4fae33c630a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabaptistschools.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabaptistschools.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59317a44-5cd6-5ac2-9d8a-626bc349dc2e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabaptistschools.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabaptistschools.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa181c93-2c49-5e69-ba24-f739de7cdb1b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabarriosfisioterapeuta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabarriosfisioterapeuta.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dbf9015-2251-51a6-b719-2182f1407126","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabas-jp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabas-jp.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee4605c-b60f-51eb-8031-d62034826cb4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabas-sadors.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabas-sadors.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66ab86de-22e4-5d04-a395-ef4fed205a31","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabasboatclub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabasboatclub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eaea8eb-f784-510c-b023-cb171f995d22","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabasboatclub.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabasboatclub.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2a2bbc8-72c8-5452-9e14-f6046b03ddd2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabasist.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabasist.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b0b7fb9-9696-55f1-9fb8-cdf47f570fea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabasonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabasonline.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d05e2248-e469-573c-9678-8ad0b1a15de5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabatearoom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabatearoom.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b85fdb08-c495-586c-92da-fbf2d709dd7e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabateva.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabateva.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07471d4d-5bb0-5264-96a5-873bf20e247c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabathmoi.makeup","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabathmoi.makeup']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68f3cdf1-ed13-5da2-8b2e-016146bd8492","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabeallstearoom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabeallstearoom.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edc44e98-4f3e-573b-91e7-f766407f48c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabeeeb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabeeeb.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab86e634-c38a-51c1-a195-e26a6addfccc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabel.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d294715-ad4e-56fa-ae7a-9ee2afb46548","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabel054.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabel054.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f150d59-266f-562e-8a21-bb8fcdc6dfe0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabel054.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabel054.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8f5c27c-71c3-5ede-8bb5-9b8f28e0b20a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabel77.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabel77.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--762ea0c9-6c60-5c59-9268-df40185555a9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabel77.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabel77.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca454b85-d814-56bc-81ff-87896e42b9d4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabel777.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabel777.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--473a0568-f943-5bd9-b5f6-ad440f3ea307","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabel777.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabel777.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e49660c-a596-50f5-9854-44b02542b613","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabel88.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabel88.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68b1203d-bbc2-522f-9719-cece228dd9e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabel88.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabel88.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9952228-b713-55a4-9bf3-a905d03cceb1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabel88.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabel88.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22acf8b-62bc-524d-8fbb-4b49cbdc2391","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabelageangu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabelageangu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ba2cd02-629c-575c-9094-1771e5b19ac3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabelevents.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabelevents.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a54998a0-79d2-54c2-a1e7-4874792bb2f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabell.monster","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabell.monster']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ab0a461-7eb7-5be9-a48c-1135369fbb91","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabell.space","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabell.space']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4762229e-4174-592f-8ea3-1e52dce0cc55","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabellacasalle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabellacasalle.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0160e548-1fc9-5788-a655-14753e7601d9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabellaterapeuta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabellaterapeuta.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10368034-1f74-52b3-ac91-1adae99dd42d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabelle-sincennes-lapointe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabelle-sincennes-lapointe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--662c13b7-14cc-5fd7-9078-913514e19631","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabellehu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabellehu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04ed29f8-e162-5409-b0de-21a142661fb4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabellgarfio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabellgarfio.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d6c6bfe-a008-54a3-883a-a33b13239044","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabelthompsonlegal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabelthompsonlegal.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c442e29-be07-5bba-a790-761e9ee2db1b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabermo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabermo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceeab1f1-b2a9-5ed2-9944-5655c93b2c19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabilmunshi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabilmunshi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--437bab5f-e915-508c-8e0d-2d8a59ade516","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabiosis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabiosis.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09f36181-6494-5f41-8a7a-f26335196b1c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabita.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabita.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f84c35a-b463-5c93-8426-93513d37c534","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabiyaindustries.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabiyaindustries.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--787f91d5-3417-5b5a-aba9-72f01ae73337","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabiyatech.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabiyatech.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49138588-3207-5a61-b8fe-c7244749062d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anably.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anably.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90ac7aae-0a1e-5640-8b0d-fec2ef364402","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anably.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anably.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e92de19-c82e-55f0-ab92-8b607fd5e2b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a25a700a-b538-587c-a041-5b4f422589fb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabola.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabola.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e678d020-0b3d-59e9-a284-a8f0498d0774","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabole-nl.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabole-nl.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4060ac2-e490-57c3-964d-8c5f1be27488","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabole-steroider.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabole-steroider.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e57598aa-9022-5f37-8f81-03ae7c11cd49","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolendepot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolendepot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92720331-a122-517c-a47b-3ba464b59b1d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolenonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolenonline.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f88a5abc-524b-538c-969d-e1f880b88357","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolic-steroid.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolic-steroid.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea3f42bc-c514-5857-af06-61c0894e8026","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolic-steroids-online.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolic-steroids-online.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--755a2bec-b1ba-5051-92e8-365b5b1d3793","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolic-steroids.asia","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolic-steroids.asia']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35c79005-cd09-549f-91d7-ad688d689274","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolicapedia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicapedia.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7771d216-664e-5583-bad0-59b1ef8dfc57","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolicbodies.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicbodies.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f44902a9-ee56-54fc-83a7-e31c0c5edd2c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolicguide.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicguide.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5450c92-1c9a-5c86-9264-8b51338dc52c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolicguideusa.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicguideusa.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd3febc6-ebd4-5ccc-8d96-10da40a7b60c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolici.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolici.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e230ef5-856e-5486-a6d9-a0789d880e1b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolickiing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolickiing.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdc74a86-69ca-52b2-b5b9-fa7445b7617d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolicpharmacist.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicpharmacist.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fd8e404-2217-5f9c-8363-0fbef007d28a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolicresearch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicresearch.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57589a2f-10d5-57d6-b98a-f80b767649c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolics-pharmacyuk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolics-pharmacyuk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--029c6d91-09a8-5622-9f9e-5e6caa489dcd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolics-sa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolics-sa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bddb2f0-2471-57b3-a34e-b7c6aedaeb5e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolics-sa.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolics-sa.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1f50b61-320b-56a7-866b-b958b06a395e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolics-sa.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolics-sa.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79e4f0a2-4843-548f-867b-c13870543774","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolics-sa.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolics-sa.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dae0449-1435-56f8-b6c6-3236d25a4593","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolics-sa.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolics-sa.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5955ec28-786b-59fe-a001-6d825af90521","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolics-sa.store","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolics-sa.store']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--717f83e4-1c4f-5c61-83eb-394519bbd8d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolics-sa.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolics-sa.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24a0100b-99c0-547c-8566-1aa0ac73caa4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolicsfitgear.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicsfitgear.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d08de2-148b-550f-8ad6-adae6a22a5a5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolicsteroidguide.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicsteroidguide.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18bc9090-e144-52f2-a5f3-06e2d5cbdbbb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolicsteroidinflorida.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicsteroidinflorida.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d57baf0-c0e6-5e77-9bb7-841248fb2b29","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolicsteroidinusa.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicsteroidinusa.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a2fab6-9fa0-55d8-a739-cfbe9e014d0c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolicsteroids-canada.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicsteroids-canada.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4120b6ac-5cf0-55d0-b76f-f0fc0cf08591","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolicsteroids.blog","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicsteroids.blog']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f65c02f-d2c6-5627-b9ca-1ea81e9d30df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolicsteroidsguideuk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicsteroidsguideuk.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--629d7c02-2378-52dc-a508-b78c37ce6cf1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolicsteroidssale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicsteroidssale.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa7dd017-d5c8-569f-bb2d-36e1de470b38","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolicsza.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicsza.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b59b4dfb-9ccf-5cdf-8c00-8bdbd2e60c84","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolicz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f65c1a1-0598-5501-a2a4-a3dadeafb895","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolika-steroide.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolika-steroide.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3bb3b54-b045-5e0f-bab6-20bd3a7fada5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolika-tabletten.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolika-tabletten.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bfc4aa4-9b59-5355-8e61-62fb0fd57a6b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anaboliksepetim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anaboliksepetim.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0fdd660-c281-5b9a-bbce-1d05237ded05","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anaboliniaisteroidai.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anaboliniaisteroidai.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43e0f103-9777-5870-9724-3b1e3310e05e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolique.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolique.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25b4e99b-3c67-5f32-a086-d5ecfcfb8c7d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolische-steroiden.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolische-steroiden.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--149b0015-bdc7-5fdc-a1f4-b9282cddf175","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anaboliset-steroidit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anaboliset-steroidit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9c5f5a4-9af0-5faf-a15c-d9ede2f1f98c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolivia.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolivia.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--911693b3-4f17-5832-bc1f-51eff5d77550","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anaboloja.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anaboloja.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d875e91-44cd-5ea1-8d67-88684ee1ed46","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabolske-steroider.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolske-steroider.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77bf0a19-1609-5315-b3e8-d5e513089225","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anaboyanova.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anaboyanova.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a020ec82-8f0c-5bfc-9d7d-c6148e79f3bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabul123.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabul123.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89ca4c7c-d075-5694-b417-874985318fbd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabul138.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabul138.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30458f36-ccbf-5091-a237-640f6270c2c6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabul168.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabul168.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7559075d-a1b3-59ad-b751-9d8695669259","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabul4d.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabul4d.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7d1041f-9ab9-51a0-989d-34dc795b0ad3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabul4d.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabul4d.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9407ebe5-7629-5995-8a53-699b84f593c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabul69.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabul69.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0525ed76-3ea2-59b8-8709-423865a51b89","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabul69.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabul69.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6e7c0ea-10f9-5989-9204-022f88f5cbd5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabul77.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabul77.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40c79b81-aaf3-546a-83b2-12c0e1335a5a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabul77.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabul77.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2cbc7df-7f74-5bc8-8ee7-bc8de78a4bb9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabul777.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabul777.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--129ab5e1-d7ef-5241-a336-f3daac59c7fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabul88.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabul88.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cd2ed55-96b9-59d5-b21d-587a03bb5ccc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabul99.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabul99.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec267598-bc8a-5b9e-93ab-85805654cf0d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabulslot.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabulslot.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e013a57-c32d-57c8-b0bb-fe096d0d6361","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anabyks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabyks.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f6299a8-04e7-51c7-8db5-9021b0379e40","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anaccodehotelandsuites.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anaccodehotelandsuites.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcb89fc5-0da2-5542-98b9-a958bfe761ec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anadolucasinotwitter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anadolucasinotwitter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81790eca-c814-5136-9504-c2d3011fead9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anadolucasinotwitter1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anadolucasinotwitter1.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98973327-8228-50f3-af39-bf53ea4b04aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anadoludogafarm.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anadoludogafarm.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbbb9a8d-f2bb-5e27-b809-618a84053ae4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anagroup-airskycent.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anagroup-airskycent.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b396dc63-ab87-57da-8c81-160f78a6de75","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anagroup-airskynisep.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anagroup-airskynisep.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b1c50b4-21c6-5e25-9700-8fd8bcd4945d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anagroup-airskysenti.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anagroup-airskysenti.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e48bb7e-3200-5db0-9ad2-3c568ef2825f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anagroup-airskytip.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anagroup-airskytip.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d7fde2d-3acc-57ae-911b-f79ca2ff8376","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anagroup-airsmileage.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anagroup-airsmileage.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51da04d1-b398-5aa7-b4e9-8663ed2e5159","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anagroupsmeleage.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anagroupsmeleage.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77c0d643-c728-5e2e-9b70-c2c2ecb89446","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anairservices.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anairservices.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdfa127d-7d85-5a28-aada-6dcfa409b65b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: analisejogosdiscussa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'analisejogosdiscussa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89334c91-a90f-5124-99b2-599bec349a46","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anality-google.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anality-google.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fac3dca9-b8eb-5981-b5d1-03b4e3689589","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: analog-renaissance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'analog-renaissance.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c40547c5-d54b-50e8-a8ce-3c32eccddbf1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: analogically.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'analogically.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c98c10e-2553-502d-bca5-847ebbb41c8d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: analogydid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'analogydid.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2680022-7904-5ba6-9d55-3e19c5daa885","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: analpickups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'analpickups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7c8f134-952d-556b-828c-61ad45edeef7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: analyseweb-base.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'analyseweb-base.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--667945c6-cf1d-544d-ad36-b97c68ca8756","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: analysiswise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'analysiswise.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fc94906-745b-515e-8fe5-62298d8ac38d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: analytics-google.business","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'analytics-google.business']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a73f58d-dccc-5d7f-9ece-70fe06a699d2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: analytics-transdatagoogle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'analytics-transdatagoogle.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2158afe2-6267-5c12-b8f7-b396c1d74c36","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: analytiwise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'analytiwise.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3db1881-9d6f-5993-823f-8d6752d63954","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anamelcups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anamelcups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcd0de63-194f-5001-bec4-9545ce01131e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anamexgroup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anamexgroup.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6723fbb-3212-530e-b285-e58f1e362342","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anamexperience.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anamexperience.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a88e7d4-868e-5fc0-9718-df52c8a7b51d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anamileage-airskynofy.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anamileage-airskynofy.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f345eee-dc57-5f0b-9fd8-3438c71cb700","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anamileage-airskysilp.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anamileage-airskysilp.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e60cf0a-a0b4-5a59-8e91-e638c2f10f41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anananzi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anananzi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19f2423c-ef7f-523c-a359-aafc8abfe4e9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anannabooks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anannabooks.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--253f35c2-ad01-5b51-ae45-ccc541b8f09a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anapirate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anapirate.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e51a9fae-f6df-580e-a178-77f84a322fca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anas-satti.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anas-satti.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8837e0c2-62d9-5774-9e9e-bc297d7d3bf5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anasky-airsutip.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anasky-airsutip.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b6b0e5f-eadd-5b1e-b53e-68c02439f49f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anasky-tipairsrepoly.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anasky-tipairsrepoly.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19d6dff8-ff5d-5d33-afbc-1cfe987905b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anassassaidi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anassassaidi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--927a637b-f47c-596c-b4d5-b7fbd52a057e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anatomicalpatternobserver.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anatomicalpatternobserver.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80ff36bd-17b2-5798-99ea-461c50305c54","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anatrip-skynevrsui.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anatrip-skynevrsui.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--398d1c48-c324-5f9e-9c24-0852e6ec0050","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anatta.uno","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anatta.uno']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36ecf655-7309-5610-a010-f27b7e96c6be","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anattadesigncareers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anattadesigncareers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e56e424-8476-5004-bd8f-ad908c41e4b4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anayagroupsarl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anayagroupsarl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5dff041-c916-5605-a76b-dab326f61689","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anayahsuits.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anayahsuits.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03a37e09-7794-5029-a1f9-d6338b6930c1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anayainteractiva.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anayainteractiva.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaf3d460-9e78-5ad7-8266-b93a2d778e4d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anbsuiryyi.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anbsuiryyi.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1accd6ce-9088-59f6-a0af-572fee88f56e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anbtxverify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anbtxverify.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cbe6a85-689c-5cbb-b21e-711647a9d38e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anbunce.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anbunce.top']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1007da04-459f-50f8-9803-814a1d15a80b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ancamazonnatural.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ancamazonnatural.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ec7bf3-7970-5752-a748-f30585ed01dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ancessary.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ancessary.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9cd7c65-0b9c-5f99-aff6-1456b7b31230","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anchoragewise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anchoragewise.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6996ad0a-e01f-5ae9-a301-954f1194d76d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anchorawallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anchorawallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3acf3e9e-9e6b-5d05-ac4c-b2e03e0b7d23","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anchorbase.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anchorbase.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d991e6bb-13ab-5793-bc81-767c65ef47fc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anchorcaketransport.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anchorcaketransport.autos']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--628d5aea-c854-5d33-a0dc-62822045233f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anchorcapitaequity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anchorcapitaequity.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d1e9753-9994-5a73-8621-8cc1748b4439","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anchorcapital.bond","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anchorcapital.bond']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77cccf2c-9758-5c61-bd96-5fb6cbdad109","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anchorcascade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anchorcascade.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--814dfd7e-0f4d-58f0-83a0-f3c1d02e8759","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anchorcashflow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anchorcashflow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34e9eee8-ca50-54d2-a636-2f6b6b080387","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anchorupdate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anchorupdate.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ddde6d3-2ef6-55f0-b137-81ce0f123e57","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anchorwise.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anchorwise.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c60ecf0b-a26d-5f6d-9b81-f9f903486309","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ancienneargentmassif.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ancienneargentmassif.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5de50d67-ae15-5f62-bcba-a2baa5f10ff2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ancient-massage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ancient-massage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad0948f6-eba8-5372-b73e-6999ba762462","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ancient8ggupdate.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ancient8ggupdate.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdd9e00f-6ba0-5b81-8f8a-b4bb63a3d63c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ancientastronauts.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ancientastronauts.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--213044aa-06f7-54e6-b912-075d84771e3a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ancientastronauts.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ancientastronauts.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b6d2b56-a696-5f9d-bb48-7e5f6c91da82","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ancientdnadatabase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ancientdnadatabase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1437819-581a-5df3-9967-573aad8ae5fb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ancientdnadatabase.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ancientdnadatabase.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48b03529-7f62-5319-82df-44682d0d2980","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ancientmassage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ancientmassage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4be93e28-915a-5f47-8676-4c612a3d391b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ancientsuitable.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ancientsuitable.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60f716ca-6e5d-56c3-ae85-5e803cbbe4bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ancientsuitable.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ancientsuitable.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bc12b13-31f1-5bab-9bed-50320217c2ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ancientyogamassage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ancientyogamassage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--510a8fd6-2f6d-50a6-abba-41813ba7ff41","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ancillarystaking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ancillarystaking.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac8eab4b-dde5-52db-b487-6e6e951a484a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ancillarytoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ancillarytoken.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90f217ab-947a-5009-ab24-9b9efacfd00c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ancillarytokens.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ancillarytokens.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--277888fb-7e7e-5fd0-a433-5336fd72dcd5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ancoo-batttery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ancoo-batttery.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e258c708-ad87-51b4-b736-1e9052a68971","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andanza.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andanza.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6ecc562-9c06-591e-9939-284b917ac35e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andatti-aqjvntps.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andatti-aqjvntps.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91bde1c0-5595-52a0-85f4-e0afe422290e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andbattery07.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andbattery07.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e85cfbb-7a11-5fcd-a735-30e6e235dd02","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andclaimheaven.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andclaimheaven.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a0c7a2-d4d0-58db-a255-b4a963c719fc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andclaimheavens.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andclaimheavens.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--897be8a3-af35-5f08-86a5-2ac9c74e87c5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andclaimparadise.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andclaimparadise.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f5aab90-8dd5-5ae0-a09d-9727caa575cf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andclaimparadise.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andclaimparadise.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9db69d5c-d9e9-52be-ba97-671767ea011c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andclaims.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andclaims.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7d0afea-d8ad-51d1-9132-cd2760481a25","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andclaimsparadise.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andclaimsparadise.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--157733e2-c81d-55b4-a65a-29efe7f33f7e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andclaimsparadise.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andclaimsparadise.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b166cdf-3d2b-5959-a41a-a4169b4a03cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andcollecttrustedgiftvault.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andcollecttrustedgiftvault.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc6ad0b7-c66d-5da4-8864-36b43db1e7d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andcollecttrustedgiftvaults.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andcollecttrustedgiftvaults.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a68944db-3e10-515e-ae38-7f9a70955253","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andcollecttrustedgiftvaults.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andcollecttrustedgiftvaults.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b3cc4bb-5e5e-5f23-890e-302fc1976dc9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andcollecttrustedgiftvaults.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andcollecttrustedgiftvaults.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bf10fc4-888b-574f-a7b2-1a55946e16b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andeermatto.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andeermatto.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc41c1b5-215d-55c7-b5af-f400319e41c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andersfinancialgroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andersfinancialgroups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4dd204e-7662-5f2c-a568-61426a9fb4ad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andersonandcoleattorneys.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andersonandcoleattorneys.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08abfb13-bd7e-5f59-bb8f-db305bb0fdfc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andersonbasementwaterproofing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andersonbasementwaterproofing.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28594421-7d6e-5fe4-86d6-b7e9ecdfd07f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andersonbossa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andersonbossa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ce8ea32-71e4-574b-828e-a2d5ee11fb2b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anderssonhemforbattringar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anderssonhemforbattringar.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e97e2e2-8ab0-5aa9-93ad-5e359b0ae7aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andessa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andessa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12b9c13b-bee6-5fbc-90a3-6513fa90e1e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andfurnishedsuites.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andfurnishedsuites.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4911b949-7e41-5723-b755-8078eb576127","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andimomattheeussen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andimomattheeussen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eb87f96-568d-581f-9012-89b02f26ec48","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andirsan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andirsan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--872f068d-f02c-52c8-8474-7bfedfc74b8c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andlojaeletronicos.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andlojaeletronicos.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--825d1905-7536-5b9d-8aff-b031a05b1f7b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andmotorcare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andmotorcare.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eb8320a-9320-53ac-805e-bcd235d31eff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andonirevolutionmovement.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andonirevolutionmovement.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68e0554f-6bee-564b-82fe-2a20f7285ae2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andorravisacheck.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andorravisacheck.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--386257f3-b89f-5b36-ab6a-e3947c7ab99c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andradealarconabogados.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andradealarconabogados.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b44d41ed-1a0a-517e-8ba2-3494a3f71b3e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andreanirsko.forum","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andreanirsko.forum']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76c27427-c16f-5fab-9487-1980e08a0379","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andressalimaadv.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andressalimaadv.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e37161b-8eff-5627-a384-529e04473626","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andrew-nabat.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andrew-nabat.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d901557-b7b8-5702-b589-fccc9037a5d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andrew-tanzania.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andrew-tanzania.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e222aabf-fa63-5546-a501-8ece9980afc5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andrewdrummondfacebook.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andrewdrummondfacebook.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b74983e4-f31f-5f66-9af5-6e367e41eab8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andrewdrummondreddit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andrewdrummondreddit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e22772d0-dd41-5ff9-9f04-9fe6089150ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andrewprussack.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andrewprussack.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91a67d2b-7d0b-59b4-a5b7-02b03d4df253","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andrews-air-force-base.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andrews-air-force-base.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5088109-54c0-5e93-8f03-ab018c2ff56a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andrewsairforcebasetowing.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andrewsairforcebasetowing.top']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25a79a04-8295-5336-a863-0efe1444558e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andrewsharrattdesign.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andrewsharrattdesign.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaf4c5c4-e13d-5f08-a24d-095c7960a4ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andrieenzoom2day.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andrieenzoom2day.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d57f6a48-c7bf-54da-b395-646bc33fef1f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: android-update-stuck-enp.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'android-update-stuck-enp.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98950a04-c0d5-5737-bb1b-9dd6818ed71a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: androidally.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'androidally.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77fa2330-1a1f-5aa7-bd7b-45ba92617606","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: androidmassacre.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'androidmassacre.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2914d2b-8b55-559b-85d0-fccca4bd4786","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: androidscreenupdate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'androidscreenupdate.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ee8f519-86df-5810-a760-9b939c0e1bf8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: androidshieldupdatefr.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'androidshieldupdatefr.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5ebd5f8-daa2-5793-a270-bd009570c2c4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: androidshieldupdatesfr.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'androidshieldupdatesfr.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c44dcb6b-801e-521d-97f1-38f1679cd4b7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: androidupdate.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'androidupdate.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67429c7a-a92b-546f-aecc-e7d5f24b81eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: androidupdate.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'androidupdate.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51aec46e-a834-5eb7-8152-ca785b3304da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: androidupdate.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'androidupdate.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0a6e5e3-3c98-539f-b4bf-6adc5bfe5962","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: androidupdates.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'androidupdates.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7111e19-9534-573b-b0cd-cc2fa4918af0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: androidwearbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'androidwearbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9686926c-329a-5a62-b988-aff3605196ef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andy-527.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andy-527.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdb51452-152c-5d49-9bca-0e99dd068e88","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andy-linkedin-receipts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andy-linkedin-receipts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0be9dab9-87e4-5645-820c-8c493b2404ea","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andycytron.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andycytron.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b57af03-4cd2-5b79-8155-8b7b66459664","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andygriffithshowdatabase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andygriffithshowdatabase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdaf03b3-9fcc-5aa8-9edb-5dd7fe2cbab9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andymyatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andymyatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d2c2e66-7935-5bf2-82bc-8c50ea5b9017","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: andymyattphotography.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andymyattphotography.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53af515d-4d7e-54f3-bed4-0fcbac2103f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anergiz246gmailroyal.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anergiz246gmailroyal.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dad6e93-8f09-51c7-bccc-828bcc8607bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anericafirst.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anericafirst.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d8d9aff-2646-5921-8b4e-8ceabd3eeb7a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anessa.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anessa.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0959440-2bd9-5955-8432-b584d6a97103","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anessa.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anessa.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45ce99fb-44a6-5845-b193-6ecf6de364b3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anessa.homes","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anessa.homes']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51d915e4-2f28-5ca1-96c1-6261d37e8b69","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anessa.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anessa.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68135222-6cf3-5227-9d94-a62135a7e344","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anessa.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anessa.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb2ed03a-179d-5f32-bbea-4c71b3afc3e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anesthesiaerrorcases08.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anesthesiaerrorcases08.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49255974-51e3-59fd-b124-723e4bf73773","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anesthesiaerrorcasesfinder.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anesthesiaerrorcasesfinder.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a970ece4-54ea-5a94-9818-5c1e3b96df53","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anesthesiaerrorcasesguide37.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anesthesiaerrorcasesguide37.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--584c4c82-f84a-5df6-8027-9c3c0558b9e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anesthesiaerrorcaseshub.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anesthesiaerrorcaseshub.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d796d120-d6cd-5ef2-bce3-67fcca565311","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anesthesiaerrorcasesnow12.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anesthesiaerrorcasesnow12.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a402fa-d4c8-5f74-893b-c5ca44ebca16","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anesthesiaerrorcasespro32.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anesthesiaerrorcasespro32.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a23ac1b-6a63-54eb-9bbd-5349bca85555","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anesthesiaerrorcaseszone08.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anesthesiaerrorcaseszone08.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0ebf23a-7329-5214-9d02-5da414887795","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anewmedicare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anewmedicare.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87cfc980-0280-5951-b477-04ace8f39e01","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anexo-securefiles.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anexo-securefiles.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ede58756-95aa-5597-ba1a-4559390003d3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anfarms.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anfarms.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e852ffed-0d54-530b-ad3c-1fe4493e29ad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anfirst.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anfirst.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec0911c6-301b-5d48-9500-b3562991d78d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anft88.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anft88.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bacc96c-42c9-55f7-ac52-dfacf0ef2781","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anfty.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anfty.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12a849dd-5612-54e7-ab1b-d69d1973b8d6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anga-zanzibar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anga-zanzibar.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16c3864c-7236-507a-a9f1-b6b6b9c01cca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angebot-mobile.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angebot-mobile.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e19160a-8180-580c-bd78-19ab88886782","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angelaattison.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angelaattison.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfc62b69-cecd-5063-bb18-8fff4046365d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angelarenabattle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angelarenabattle.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48b5eca4-892c-59d0-8f0c-c34a51b93b68","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angelesrefinishrepairsinc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angelesrefinishrepairsinc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd49c29e-718f-5965-89a0-6791eda033b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angelfirst.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angelfirst.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3e94bf5-c7af-59e1-a3f4-48379b62848b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angelictinychipups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angelictinychipups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafc6e69-3eaf-5c94-9ba5-c377267c75b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angelinaballerinathemusical.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angelinaballerinathemusical.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f34d3682-ff78-5576-9b9a-3150a67042ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angeloschilidogs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angeloschilidogs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d0a3450-ecd9-592b-927d-814af11f1b58","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angelsandemonbattle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angelsandemonbattle.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1ac4515-c97c-5766-bf11-d0843a67d753","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angelscryptocurrency.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angelscryptocurrency.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5d3fba2-8261-5384-bbc1-c25931d85654","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angelssantamonica.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angelssantamonica.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9614663a-969a-5d71-b2b4-74f9ab6dcb87","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angelstartups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angelstartups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07b6327b-24c1-5d61-92bb-fc6ad76af82f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angelstattoos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angelstattoos.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49340287-96c9-50c6-94b6-09e60d9e9efb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angelsuites.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angelsuites.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db77d693-825d-5807-8cee-a93c0da8d970","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angepurchase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angepurchase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52ca72d8-9c8f-5e27-b1cd-3652bed22cb9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angiemaccambridgedesign.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angiemaccambridgedesign.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d26a9de4-6b0b-5fd2-a656-487785fb99e1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angievalentinab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angievalentinab.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b11fb2be-01c4-5aca-9dba-2ba02a1f4dbf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angkorcarguide.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angkorcarguide.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7380418f-9c63-5fdf-b977-8cf047d59f21","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angola-e-visas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angola-e-visas.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14974939-dbb4-5b80-b33f-8561f2b9263a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angolocrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angolocrypto.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fbbfb7f-4935-5721-9b89-49d7ebc154ae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angryapple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angryapple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59b241ae-e00c-56af-8655-c58d906677eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angryapple.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angryapple.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--797a44f5-52e7-58d9-8dd1-62fe86529ff9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angryapple.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angryapple.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4137ec05-0bfa-595b-bbb9-8bde0d4364fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angrycattoys.forum","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angrycattoys.forum']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f26ea0d-1b7d-591e-98a7-7b5998463322","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angrypepe.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angrypepe.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c89c5569-760f-5cbf-aef7-2caf57c11bff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angrypepefork.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angrypepefork.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1509a95-7e2b-5640-8d69-f6d670b3c0a0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angrypepefork.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angrypepefork.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--499323d7-3e61-586a-b72b-53452b5e3497","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: angrysally.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angrysally.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--952b278b-2381-5058-bb5e-dd446997ef89","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anguillaregatta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anguillaregatta.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf7ac953-04b0-59bc-b86b-98bdccfcfc2f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anhanzhi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anhanzhi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb11aa9-5cae-50fd-afe4-2b6b10e201af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anhbaomedia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anhbaomedia.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70e1642b-8c1f-5f8f-baf3-13f28705ba6f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anhicuweb3fui.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anhicuweb3fui.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acf85cb9-f1d0-5aa9-a7b4-ca23a12593ba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anhphamapple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anhphamapple.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--602123ab-a6b6-5982-811b-0164b1825d24","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anichkovbridge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anichkovbridge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a84ad29-b32e-53f0-87cd-d6fe396c8b1a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anicloud.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anicloud.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f511a35-fe61-57cb-b465-75c5331167c6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anidoz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anidoz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9760f2c3-0b16-593f-9cbd-8d2f55780456","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anil1bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anil1bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f99d9cf8-4217-572a-9c1f-45b31b6b8921","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anillcann123gmailvip.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anillcann123gmailvip.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4133926-4570-5eb8-8da0-05be6088c84b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anima-conferences.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anima-conferences.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e931d7d0-6727-5a4f-822f-0c378ffe2c00","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: animal-farm.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animal-farm.app']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ef50c3-960b-5e00-bdb1-c3331f19026b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: animalclinicnewsmyrnabeach.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animalclinicnewsmyrnabeach.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddaecfce-2143-55de-9481-b964fa8d862e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: animaldiscoveries.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animaldiscoveries.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08b09f67-b4bc-595a-86cd-9be2c37cc34e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: animalfarm.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animalfarm.top']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d620683f-9f4f-5a91-bede-ee29e7386ded","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: animalhospitalnewsmyrnabeach.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animalhospitalnewsmyrnabeach.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f7e4289-8192-5c28-89c2-bd023613856a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: animallawmatters.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animallawmatters.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f378ee0-3a54-56fa-bd14-28a42041788b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: animalsolana.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animalsolana.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1e550c8-a0ab-59ab-876d-c63b72e8c381","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: animalsolana.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animalsolana.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--604cc7df-3705-5b1b-a591-dbefe736a41f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: animalsuits.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animalsuits.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d691ddd-52af-5c5d-88bf-604f20263d32","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: animalwellnessavon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animalwellnessavon.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44f153d4-7ca8-5e58-a593-58ac84bd3fc9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: animasuid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animasuid.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0165c31a-8f0d-5aea-b9af-005fd1e912dc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: animauxtanzaniasafaris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animauxtanzaniasafaris.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--862d620c-1ff8-57b1-9e0b-1721f382e84a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anime-vault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anime-vault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--922e949e-5f86-5c04-ad6a-d3f973288084","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: animeairdrop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animeairdrop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2da72482-7013-5c5d-b4c3-d7128ee607e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: animeenlinea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animeenlinea.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e51b4da-c299-5347-980a-e5d4264c82fb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: animerevolution.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animerevolution.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e234b1c3-55b9-5a8d-95ef-8ecb08b39ad9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: animeshiba.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animeshiba.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a130f5d5-ecda-54f3-8b05-3f86ed1ffed3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: animeshiba.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animeshiba.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a388e87c-79d0-5b8c-9021-6cae8b6cfb8c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: animeshiba.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animeshiba.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bd88f39-a3d7-52d4-9258-ea2b54f211e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: animlinealux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animlinealux.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6523c59-0821-580a-ae8d-fe8fdb385b9a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anishbhatta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anishbhatta.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3301d5f-85c2-57bc-bbb1-7082a858c546","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anishinabilodge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anishinabilodge.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5cf4efa-988d-5f22-8ed3-f255ba080361","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anissaefrey.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anissaefrey.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba71d9a0-0551-5f78-8539-635586c23fab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anissafrey.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anissafrey.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--523f2bd2-6f48-5fb1-910a-9cfa97d876a1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anissafreyrealestate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anissafreyrealestate.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--275df2f1-d13f-5571-ac6e-b8fce81c7e8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anissajolie.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anissajolie.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c7ec1b4-5641-5b51-b89f-a4f0d6dd77ae","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anissakate.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anissakate.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16d7207d-5c89-5fb7-b221-3567723a6e60","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anissakatenue.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anissakatenue.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9da154e-6cdd-51a5-99b9-6ae60e04ff79","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anissakatevideo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anissakatevideo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac4b0643-0383-5a55-9c1d-244dcfbd4612","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anissasdanceacademy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anissasdanceacademy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9cf6311-5928-55d1-b1fe-396ba00929ef","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anissashasta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anissashasta.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fbfa1d7-a306-5f8b-b9a7-ad63a7089581","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anitronics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anitronics.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8b5d71e-518e-5194-ad08-26abc233647a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anivault.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anivault.win']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de30b94c-822d-5a87-9138-efad77e67839","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anjingdemeinanzi.monster","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anjingdemeinanzi.monster']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc0ef9f5-5b43-5ca5-9001-548564271d38","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anjirslot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anjirslot.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2db8160-2a94-5005-9e53-45c38139ae6d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anjirslot.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anjirslot.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53944a3d-d058-5f85-89ac-503ac43049fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anjirslot.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anjirslot.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffe11513-e14f-5cd4-9006-518b4fb2dd73","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anjirslotlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anjirslotlogin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9459269b-5a25-5a34-a8a9-0080e34c84dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anjitoy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anjitoy.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3f93091-b21e-545b-b8d1-e8ef7798be47","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ankara-first.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ankara-first.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79c7da3f-bd60-5ffc-98f7-7fa8f5858bf9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ankara-monadian.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ankara-monadian.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca37fea6-930a-5fb9-b248-c259591af4c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ankaraguzellerim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ankaraguzellerim.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cedfc168-a719-551a-83fe-f7f18ced8405","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ankelinerherz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ankelinerherz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbcb678b-bedf-5304-848b-a96e6c6d4d99","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ankerussale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ankerussale.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c0c0e3a-9d2f-5c79-aefb-546d9bea64ed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ankssa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ankssa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6551c367-4aab-53ca-bc4c-d9f4fe30d9b6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anktron.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anktron.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8875ee10-2499-5b7b-919e-358996cf767f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anlin-groups.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anlin-groups.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d34f0201-ea0b-5c9b-90b5-e12c59715cf9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anlsecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anlsecure.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c24b8c7f-54cb-556b-a49d-4686169efeb6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anltc.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anltc.cc']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62abadbd-3cc8-545c-98d2-62ffc57dd017","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anlverify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anlverify.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5861240a-c129-5c0f-acf1-692b42ca7a0e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anmlrbc.onl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anmlrbc.onl']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d234de00-5048-59dc-8d2c-f0af83d71c8f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anmolchattha.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anmolchattha.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c0d2a42-6100-5e5b-b1ba-a8c436725117","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anmolchatthamd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anmolchatthamd.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f044a3bd-c9d2-5e39-b376-b3b4cb23a771","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabackyard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabackyard.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5724a66f-c757-55cd-8c85-d4f5f9e79fed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabadz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabadz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd659f68-13fa-56c9-8744-00b3c7c14509","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabags.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabags.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8254128-b6a5-5e32-b8c9-950c308dc5a6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabarrett.art","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabarrett.art']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17c7e9a4-7e7e-5eba-994c-3f31cedfaffd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabarrettart.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabarrettart.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e5948a6-8ee2-596f-be52-1e709ee80711","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabask.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabask.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5b89392-58dc-5d42-b820-4739b256e862","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabass.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabass.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85e20e1a-80d4-5bab-ae4c-1eba1e137387","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabe.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabe.fun']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f81bda6-f0df-50bf-bb50-52951acbdb2b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabel-redeye.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabel-redeye.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f6ee982-90f5-5bb7-814f-552886529734","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabelhanny.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabelhanny.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed754812-7334-5e94-b304-107ccc5c041b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabelkate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabelkate.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b73e73a-e260-5e71-ac13-2f91b69ff87a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabellagroups.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabellagroups.top']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0f32585-449b-5e1b-8ece-10b121b81f36","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabellashor.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabellashor.top']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ecac569-c700-5737-b419-4a489fc52b19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabelleanderson.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabelleanderson.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74eaa2fa-6b15-5262-a8b6-b771f1e9f76e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabellebacon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabellebacon.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97c2d4fa-5f9e-5637-b954-88d086088e5f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabellebacon.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabellebacon.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed091c4c-04d2-56d5-90ae-1a787a34a931","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabellebrewer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabellebrewer.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eaf4b32-33ea-5be2-9ab8-e341424fe878","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabellecromwell.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabellecromwell.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fb20b46-06d3-519f-9f55-3652d28c5988","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabellecrush.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabellecrush.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--336927be-e036-5d9e-9f5e-f17a852c6231","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabellematchett.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabellematchett.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20048bbf-e505-56f0-ab76-819909353609","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabellemystery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabellemystery.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e21f9e5-09c7-58c6-85c8-e1f8a117932b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabellerealty.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabellerealty.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdf6675b-8afe-5cd0-bf30-7f51ab0fe3e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabelleredford.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabelleredford.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59b6e2ed-c432-5193-9f7f-f3086c73b9a7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabellerosewood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabellerosewood.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--967b2ea7-b2a1-591a-8eec-699687b7aec6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabellesherrill.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabellesherrill.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ac2c6e-7a31-56af-8a1e-bf061b26a670","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabellesherrill.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabellesherrill.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3338efa-ed25-5930-8ddf-acda06846c00","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabellesherrill.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabellesherrill.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d75961dc-a236-5ba7-bb07-253c10563dda","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabellpeaks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabellpeaks.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a705c60-6462-5fb7-8f91-112dccccdc2d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabellplee.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabellplee.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e36b350-0a6e-52ee-99eb-d4f3c0cfe329","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabelmusser.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabelmusser.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b2c4f2-834b-5c4b-b59a-d545735532c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabelpaulson.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabelpaulson.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d12c224-0481-5c48-8ab5-09d274a95b95","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabenson.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabenson.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a28cd7e-a8b8-5926-8f63-29f6ac98f1ec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabilyeu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabilyeu.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8265dd40-ad77-5b92-b5f9-6be22260abaa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabirchbooks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabirchbooks.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f0a0c9a-39e5-58e2-a24d-4e8a6ba06c06","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabis.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabis.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e30da95-08a9-5834-b867-579c392dfd86","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annablix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annablix.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a90824a4-e0bf-52ea-8326-7dadd14fa89a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabockmuehl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabockmuehl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94baba7a-d243-5a7f-9649-4e707bcdca32","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annaboveembroidery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annaboveembroidery.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a742ea23-f3db-5d0e-989f-00312cd8e793","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annabrows.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabrows.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c8acb6b-f8b5-5181-b6f0-df4e063f6e33","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annaexcitingaffection.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annaexcitingaffection.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dd2862b-8f58-54e9-a7ca-7a81b63c9e8c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annapolisfarming.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annapolisfarming.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00e12cc4-5da8-5629-bd1a-6e8134f89e53","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annashairsalon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annashairsalon.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbe1e91f-87d2-537f-bd18-a2eb70c8dcdd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annasui.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annasui.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35a0014d-536d-5ea0-a338-4ab0342c2cb9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annasui.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annasui.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24b4ff93-11e4-55c9-ba23-644383c5cccb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annasui.homes","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annasui.homes']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--335b70f4-0d6e-50f0-bd5d-11e5779bbba0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annasui.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annasui.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1aa382b-0f29-5e78-bc53-911a1e3d338c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annasui.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annasui.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f05c58b0-1029-59f7-a425-74cba1a01dec","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annasuibeauty.hair","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annasuibeauty.hair']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b79e380-2632-5edf-a6eb-d565c10cd411","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annasuibeauty.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annasuibeauty.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad49d6c9-7c9d-5e60-997b-59e783793ebe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annasuipgbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annasuipgbet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f66aec3-bbac-56ef-9952-9ee13f44501e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annaswallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annaswallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e47228a-e14d-58a8-a893-9ddd9fa4e837","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annauniversityupdates.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annauniversityupdates.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b02debb-757a-5cda-ad9b-2e4f583afd19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annaweb3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annaweb3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99f9b60e-6c3f-52af-af52-c02a1946fc32","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anneartattoo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anneartattoo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7fa9d4e-f5f0-531b-be48-233ffb623793","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annelidous.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annelidous.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b1b5ec7-8f2d-540f-a743-2ef46a0982aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annemattila.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annemattila.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6c86d33-5269-5f02-92ab-14feaf362f2e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annessaonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annessaonline.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c55f043-1df3-5a5c-ba1c-70edf0a44353","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annexinapote.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annexinapote.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16d0699f-74b5-5119-b8b2-1f51f11de09d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anniebayou.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anniebayou.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a13464ad-99d9-5de3-bd4e-c2c9d32bf30c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annikapattenaude.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annikapattenaude.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a974473c-5467-5762-b7b4-509b69038490","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annobaseki.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annobaseki.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bb1a680-d272-57b6-b659-93908f1589f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annons.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annons.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--385baa83-8d00-5128-9292-4e0b70051d00","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: announcements-bybit.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'announcements-bybit.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--291d278b-b39c-56c1-b742-52aef80b958e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annoyinggoogle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annoyinggoogle.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f8fad58-a00c-566e-9b99-954c3fd6aff8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annualaandaupdate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annualaandaupdate.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f19d207-f554-52df-a2ab-7b6044f3522f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annualallocation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annualallocation.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81dab701-09aa-5c98-aa58-c74d8606b2a6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annualallocationmodel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annualallocationmodel.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b2766a8-f12b-5088-a67f-0d4410ac0558","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annualpass-farmfresh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annualpass-farmfresh.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bb2f7f8-cd70-5f7f-9a2a-439e5f023561","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annuitiessold.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annuitiessold.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8e59f8a-03cc-51a7-9d16-170d06fed32f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: annuityfirst.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annuityfirst.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcedd238-99f1-5f4e-a9fa-fd707b732b85","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anodosupdate.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anodosupdate.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f524bbab-af25-5aa6-a866-156926670596","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anointedkingdominternationalministries.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anointedkingdominternationalministries.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f78d556c-319f-5a53-b787-db8340487d2a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anonbitcoinwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonbitcoinwallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff276b7-c725-5012-944d-c666ec383c74","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anoncitizen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anoncitizen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a36fce21-5a16-511f-b8fa-0f434ce81ef0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anonsecure.host","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonsecure.host']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--984911a7-cd7f-5c7b-904e-b73ea89cbd78","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anonsecurehost.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonsecurehost.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8874eec0-47b6-53e5-bee6-cf0e8a804bbe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anonsecurehost.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonsecurehost.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61a7d38d-f8c3-5005-b532-bc03bf19ca88","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anonvault.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonvault.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d3e20a9-d090-5a12-a7a2-d0e59781d045","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anonvault.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonvault.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40aff037-daa4-596a-91d3-a8088b74a079","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anonvault.video","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonvault.video']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fe00552-1681-5872-8bf4-863ac9754f3f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anonvault.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonvault.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7fc6de6-54d9-5939-b08d-76d53fc23286","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anonvaultpremium.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonvaultpremium.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ed746d1-3a4a-51fc-b368-41d7daa72ffa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anonygmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonygmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae1d6d65-e586-5797-af20-673b75a0e4ba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anonymous-message.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonymous-message.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1df760b3-e637-5113-83fc-32d6f1dfbf53","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anonymousbanking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonymousbanking.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe9c09aa-c10e-5610-937f-6b18831eda2d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anonymouscryptobettingworldcup2026.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonymouscryptobettingworldcup2026.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97546191-c082-5977-ad33-e66e88103184","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anonymouscryptocasinos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonymouscryptocasinos.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a344f0-45fd-5a8b-afaf-518745cad7c3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anonymousinstagramviewer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonymousinstagramviewer.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23da57ff-fb2a-5e9a-93e9-8ed04481c370","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anonymwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonymwallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc8f20ad-9e9b-5cf1-9b16-6b0efac74e50","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anormal-nabil.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anormal-nabil.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50ca5945-59c5-5935-9083-a4835313b52b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anossacasa.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anossacasa.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c11ba7-5040-531d-b03f-0def19e5be5c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anouanze.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anouanze.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93c89b35-7158-538b-bef2-cbb0aad3f16b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anpatt.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anpatt.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f5632c7-7ec4-53ba-90bd-b0e44108151e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anpatts.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anpatts.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fa6fde9-2899-55a4-8549-e3194dde1f07","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anphatttc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anphatttc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b13e0675-04b6-51e6-911b-4128792b3384","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anpost-icloud.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anpost-icloud.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a2fa7bb-def1-577f-93a7-5103bc831342","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anpostoffice.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anpostoffice.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33132268-cc4e-51af-9460-aa72ff66414b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anrok-agentbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anrok-agentbase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ecbcb92-d539-5083-8f4f-d9ec59dc2bd9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ansaramassage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ansaramassage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e75d93a-3917-536d-ad48-becfd43e432c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ansarathaimassage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ansarathaimassage.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fa414b8-ac27-5583-9c8f-604d77a9a7e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ansehattime.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ansehattime.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04393ffe-8cd8-5f82-a879-256eca30645b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ansetron.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ansetron.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d13e4f5c-f0ca-578b-9fc3-1cdeda458db9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ansuim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ansuim.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c0bb667-be8e-5406-859c-7887d500d64f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: answerfirstring.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'answerfirstring.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fc497fc-c628-52be-8266-f100c0535077","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: answergmail.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'answergmail.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ffe2ab2-d7df-56da-806b-84398f2167fc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ant-piapple.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ant-piapple.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3993e184-0edd-555a-b60f-450998a4c2c0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: ant-tanzan.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ant-tanzan.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1cfff74-3f10-5ec6-9f44-d084b5f9c17a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antalya-melissa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antalya-melissa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dae3e9e-edd3-5fc8-8351-1422a3f488da","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antarcticoffended.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antarcticoffended.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a280634-824e-5b16-ba56-1721474b5b2e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antcatt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antcatt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0d5188-f542-52cd-b275-29fcb7eb0b99","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antecedentponderoverweight.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antecedentponderoverweight.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e4f9f6b-8c65-52a2-9102-4a290bcd629e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antennabooster.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antennabooster.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfab05ee-2683-5960-b040-38a443815c5f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antennaboosters.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antennaboosters.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--029ead14-7aba-5e3c-b9e1-7480a8b1364c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antepuroloji.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antepuroloji.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97e9bd4a-3e66-514e-a9cd-b0182cc94f98","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antfarmingandtractor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antfarmingandtractor.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70695ab2-2a71-5526-9426-300ba51cb1ce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anthem-medicare-advantage.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anthem-medicare-advantage.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d63b099-8363-55f7-b5f3-7067a41116a9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anthony-nabat.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anthony-nabat.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d9e0385-80a5-5293-b217-d9b76905ede3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anthony-tanzania.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anthony-tanzania.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d13d504-6b3d-5daf-8b6f-c87ab9bcb911","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anthonyattakay.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anthonyattakay.dev']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--549d89c9-c59b-5181-9ee5-68db6b287f40","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anthonyjmanzella.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anthonyjmanzella.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c939159-ac4d-5ebd-839c-e49886a4d56e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anthonyjmanzella3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anthonyjmanzella3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5244d33b-8fbb-5327-8f32-687e20dba48f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anthonylandandcattlecompany.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anthonylandandcattlecompany.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ebf6f1b-dafe-5f91-969a-b98aae8f20d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anthonymanzella.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anthonymanzella.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eeccaff-fcd6-5124-9828-51d32934d7e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anthonymanzella3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anthonymanzella3.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--248864c6-89df-5309-a592-d1da6766b31a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anthonymanzellaiii.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anthonymanzellaiii.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f01d1b2-9c1f-5de5-bf4d-39cee85e2616","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anthracnosis.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anthracnosis.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84cbaa8a-60e3-5304-82d4-2eb8b4270bd2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anti-aging-revolution.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anti-aging-revolution.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27e83041-1f31-51bb-8377-6932e97f4f72","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anti-jesuit.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anti-jesuit.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--409dce07-40a9-52a1-a55f-74983e994c8c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anti-jesuitry.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anti-jesuitry.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4978f39e-db0e-55f9-9d60-29d037ba20f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antibatterici.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antibatterici.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32c05380-3409-52de-aaf1-b663ff95a528","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anticapitronism.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anticapitronism.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b52ad301-a47b-5c78-b1c7-e9403b06b1bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anticloud.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anticloud.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0af63d8-5854-52d7-8251-66dd25da67e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anticybersquatter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anticybersquatter.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6b874c-4c14-54e5-88ae-b8cc2bdfae01","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antidep16bonanza.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antidep16bonanza.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab30f5e2-02ee-59fd-ad23-810feeadd542","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antidepressant-drugs.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antidepressant-drugs.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d7a4887-11fc-5975-a4bd-a47b11f45052","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antidepressantnews.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antidepressantnews.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59463f1b-9169-5423-8d12-402dabdc4f75","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antifatiguechairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antifatiguechairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7274f6a6-d803-53b2-b2d1-61d2f9d0b5e9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antifraudwise1.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antifraudwise1.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e89aa8c-ad4f-50c4-844f-f8b9fac7815e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antifraudwise2.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antifraudwise2.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17c2e91a-4a6e-50cf-a3bb-8605f1b2c04c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antifraudwise3.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antifraudwise3.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81e74733-e987-5728-b366-a7a94c2418cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antifraudwise4.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antifraudwise4.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5d251ee-8507-5939-b8c5-14453ccdf3b4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antifraudwise5.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antifraudwise5.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84f2812b-27a6-58ca-bc2a-34235dea2d9b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antifraudwise6.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antifraudwise6.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35c40b1d-77ef-5f3e-ad18-716658117115","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antiguasouvenirs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antiguasouvenirs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8541f346-e7df-5bc1-a94e-6c4890fab72a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antillephone.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antillephone.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c038727b-b3a6-5288-b271-1c7a08fc4438","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antilliaglobalcitizenship.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antilliaglobalcitizenship.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cabb067-0a64-519f-9a7a-05f4d7ebf64e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antimatter.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antimatter.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20ec8fe4-6c69-5f43-8fde-0df26ccc3638","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antimatter728.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antimatter728.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--228deec6-c8f5-515b-bbbb-a5a5d7bd5946","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antimatternode.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antimatternode.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03b4f755-dcae-59ae-9f02-a1ea6dd7e477","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antimedically.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antimedically.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f9c3319-f1ce-5438-8c91-93a730094b6d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antiquesdiscovery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antiquesdiscovery.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8374adf-7ce7-5fce-b80b-e3b11be5a77d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antirecoveryally.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antirecoveryally.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cf7ac7b-0843-5f97-8f25-ad408640364b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antisecurefileexcutiveinboxfolder.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antisecurefileexcutiveinboxfolder.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c9ed139-2552-512d-b52b-26213be1bb19","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antislipstairs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antislipstairs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37f1ac24-bf96-52bf-bb1e-10f1bd3b87b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antisuit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antisuit.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71c333bf-b2c7-5031-b6bd-b2f40c5627d5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antitarme-trattamento-jsb.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antitarme-trattamento-jsb.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb1d7f77-bcf7-50de-bc6f-5af7a2481ed2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antivirus-vault.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antivirus-vault.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4dc5d51-1147-556e-b636-b544a50b3152","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antivirussafeguard.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antivirussafeguard.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b36d241-97b1-572c-8ae9-dbfc84abf7f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antivirussupport.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antivirussupport.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--756fb689-2ec7-5f07-be79-998fd67b59a6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antivirussupportnumber.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antivirussupportnumber.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d3e1a69-97aa-5d8f-9179-034b15a6ba1d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antivirusvault24.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antivirusvault24.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4846c61-bd61-5711-ba1b-24bba93f2a8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antivirusvaults.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antivirusvaults.lat']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bb73122-c4fb-594f-a20a-5e0349dd47ad","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antixclaim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antixclaim.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3d74f70-0f1e-59a3-a887-16271a55f308","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antlion-piapple.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antlion-piapple.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf9bed76-78b9-53af-95bb-cb9f23ce8ee2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antlion-tanzan.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antlion-tanzan.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af254c97-6168-5db9-8d27-718a165f462c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antmanspshopsman.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antmanspshopsman.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f8f840f-33ab-51ec-8de3-fb294a2841ff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antmanspshopsman.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antmanspshopsman.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e971b82b-ab34-5a21-9bea-a42cbcf7cc3b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antojito.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antojito.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6b8b76a-2710-5b8f-9cf5-86a4aa161a36","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antojitosbar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antojitosbar.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f57f954-ea6f-572b-b1d3-590acac550f4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antojitosmexican.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antojitosmexican.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--522c97de-77ac-5298-8ad9-7bc9e2c5576c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antojitosvirtualesvip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antojitosvirtualesvip.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2313f5b1-ffdd-518c-97d4-d68bd96713e5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antoniossuitcase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antoniossuitcase.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--254d390f-f4e8-5276-89ba-9df02c7fc93e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antron-service.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antron-service.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e25be4ce-02d0-51e1-ae81-d3c3ff321273","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: antsstudio.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antsstudio.world']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--673b8071-d31b-50e0-ada9-3698b44edc5d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anumels.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anumels.top']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f158ab-2fc3-5dec-9282-9662a67bc50d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anupsinghjamwal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anupsinghjamwal.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09c7fca4-d72c-5853-b375-5f96596edea2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anupstreamlife.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anupstreamlife.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49050486-f580-5580-9395-c915e7515601","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anvilvaultsandsafes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anvilvaultsandsafes.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff554a70-60fe-56e8-8821-e9013b7d039e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anvisa-govbr-atendimento.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anvisa-govbr-atendimento.digital']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29da44c1-2b98-5a5b-94f7-f823af5446aa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anvisagegifts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anvisagegifts.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d8d482c-6cce-5898-b241-1924daa63f4d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anwarahmedhumanityfirst.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anwarahmedhumanityfirst.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e53c30f-ee96-54a1-a5e1-192b00bbba14","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anwarelectronic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anwarelectronic.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98ae522c-090a-5030-9d40-72f6acc90197","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anxietyattacker.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anxietyattacker.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8f9a4df-ac47-5faa-8df5-8db544cb4de1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anxietypanicattacksphobias.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anxietypanicattacksphobias.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee716234-3f64-5aae-8f73-43d58eedcc09","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anyfidelity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anyfidelity.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cfd39e5-f687-5257-a83e-90e68e22f8a7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anyikofarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anyikofarm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d4b4f04-067e-51ab-9e3e-cfffd7da2adf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anymsgmail.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anymsgmail.digital']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b55cf20-79c8-5522-9823-6099c7c278a7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anyonesomepurchase.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anyonesomepurchase.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd16fd4b-7ced-589c-b063-12a8a17f0627","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anyonestaking.blog","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anyonestaking.blog']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8db09656-e5dd-5a17-bd4e-6933361480df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anyoneupdate.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anyoneupdate.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--585f5e14-2990-557a-ad9d-8f63756795e2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anyreaderprivilegedverify.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anyreaderprivilegedverify.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e9f7b81-8ab3-5e0c-a309-76e970212506","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anysui.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anysui.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b67fada5-b09f-57c5-90bf-c6e681dee7d3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anythingmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anythingmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ba6b59e-86f2-5660-85c3-e655a8bc273a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anytiktok.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anytiktok.cc']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adba8c72-4046-517b-ab3c-679208980980","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anytiktok.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anytiktok.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a493acd7-6198-5cdb-9691-8b53a00ba371","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anytoken.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anytoken.one']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d72f3e2b-835c-50a4-9a4c-e9f110e5ea22","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anytree.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anytree.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--360c2522-75a5-5aa6-880f-f3be92b34a8f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anyuanxianzx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anyuanxianzx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--104e3149-e698-5cde-8ccb-2d6e33d79411","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anywherewallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anywherewallet.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1432f197-b762-598c-a822-cc0549484f0e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anywriteups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anywriteups.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e6e0e28-dca7-5b7c-b6e0-945dbe90462a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-abc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-abc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7a3526a-562b-5fac-a709-5326761c46d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-au.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-au.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c53dd80d-1861-59b6-8d6c-ddf789d973c4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-au.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-au.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aabc0e7-480a-5a5c-835b-55a809c3af46","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-au.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-au.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82013159-c08e-5a6c-8386-a998eb5f3b0b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-com-au.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-com-au.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4174e4e2-7fb0-52f1-8937-c00771521414","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-com-au.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-com-au.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5c3275d-d1de-52c7-8136-c2f2f163721e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-com-au.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-com-au.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7349fc5a-3749-5c07-92a9-df898bbc8f75","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-com-au.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-com-au.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--568fb207-4f53-5f21-83ca-22c381afecf7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-com-awards.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-com-awards.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80e5f28e-8042-5eff-9b76-60a8daa54d69","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-com-points.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-com-points.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45a14cb8-dd12-5224-87c6-050703161237","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-com-points.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-com-points.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc34702e-a3c9-5a8e-80f1-1e020a91ee85","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-com.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-com.cyou']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--937c0de7-97cc-58bb-b707-bdf12cccce78","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-com.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-com.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--726529dc-fcce-5d96-8277-17561a2a7016","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-com.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-com.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f74c6678-cb0c-502e-980b-983aca3332dc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-com.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-com.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fed2877f-40b2-5228-8ce7-122071d13e53","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-com.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-com.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd007f34-a41f-51c0-a1ef-f00d9a930fd6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-cqmdse.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-cqmdse.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4597ae-bb13-5f3a-a9d7-d00174f629a1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-eastn.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-eastn.site']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d9d531-12b0-57a5-9f5e-011f1b9ff66d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-eigen-region.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-eigen-region.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69ea7c7b-a644-5f12-bd3d-11b39cf52f65","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-helps.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-helps.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddced679-ce75-5d8a-bf53-3e5c53568052","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-transferdepartment.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-transferdepartment.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--573a99a4-d87f-5a85-ac39-f6b354329c0b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-vn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-vn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f23b92-983d-5f59-9012-4baae7dcc58b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz-websupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-websupport.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b63495f3-68fc-5e32-b869-090d6b31672f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz452.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz452.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d8d65d5-9016-50c3-a9f7-3fa14601f78e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz49.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz49.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ddbed95-28bb-528c-a171-be897fcc9e5d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz4fq.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz4fq.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2da4d2a3-40ab-5ab7-b1f9-534694d685b5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anz568.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz568.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c4ec390-f44e-501e-8685-751232a8e9ab","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anza-trading.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anza-trading.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6e2d906-0776-5a1d-8ccf-1c557cf046c4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anza-trading.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anza-trading.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90bf56d3-5ef3-5bd2-8c71-28d9b0b2cc7f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzabienestar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzabienestar.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--625e95de-80f7-5657-b01d-9496cef9cfce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzablades.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzablades.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b80530a6-1606-5ce5-9ce9-fc4fd0efddff","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzabuild.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzabuild.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57a36a5f-9208-5583-8493-c96e0e5dcad5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzacdaysites.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzacdaysites.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5620387a-71f8-5d61-8691-3dace9732250","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzacdaywebsite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzacdaywebsite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be79d7b6-ba25-5d1c-87ae-d5f332fa902d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzacdaywebsites.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzacdaywebsites.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72b22bc9-52fe-537b-8d19-e5c3cbe65b3f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzackid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzackid.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b39f3b61-8aaa-5e66-ae6b-512e504cfeb5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzacsites.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzacsites.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04bc3d70-84c5-5846-bc17-82ce56acd0fb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzacwebsite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzacwebsite.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5be8436-403a-5f7b-bbf5-40df24425ce9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzai2024.blog","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzai2024.blog']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eec5691-6441-5226-8b3c-1903f6839e52","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzaianzaiaa.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzaianzaiaa.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea318737-5d03-58e7-807e-a45b4655343e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzaixing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzaixing.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e27896f1-1883-553b-bdfb-c08d491bf6f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzan-neuro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzan-neuro.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d83189b-a3c0-52b0-965f-6d81587b8306","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzaqdg.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzaqdg.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd63c4b-fb18-5833-972c-661629b8385d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzaraelectric.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzaraelectric.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48d290b9-aa09-58ed-9574-d0ebb111eb83","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzaralectric.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzaralectric.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00de29a9-1a9e-5b37-82de-30874dd17c58","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzarsawmill.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzarsawmill.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d2ba477-2490-5876-8736-8e2dacde9260","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzarshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzarshop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bb2be61-c602-5b82-9cee-2497df83d461","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzas1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzas1.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d22f8311-6062-5061-9005-232319c6a302","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzas2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzas2.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b873172-7682-533d-b740-984ef327d5f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzaskr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzaskr.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edae6765-e7d2-5f08-abcb-489bb022db4a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzatel.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzatel.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--081bdfc1-2147-560d-9a91-b7ddc6f80e4e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzau.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzau.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--465334cc-4af4-5ac2-9d25-99eba57b3965","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzaus.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzaus.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76157d40-7aa0-524a-b1ed-cf7a3ccacbdd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzaytyd.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzaytyd.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08699d04-27f1-574a-91b4-bb762d46d288","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzbankverify.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzbankverify.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1dd7c3d-17b7-512e-9698-652851656731","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzbogo.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzbogo.digital']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0edb670d-70e4-5bb7-86a1-ba7b8c961a61","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzbpl.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzbpl.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff48f89b-1ca0-54ef-9dbc-01b55f63d012","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzchga.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzchga.wiki']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccc67d8b-4cbd-503c-b470-9e6e774f28fa","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzci.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzci.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e96ca1dd-97aa-57ec-9e4e-275743d50920","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzcloud.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzcloud.buzz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb2f38f7-3430-571d-aa45-d12666eeb395","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzco-bzsqme.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzco-bzsqme.rest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc381470-b8d3-5593-8804-100c5a68831c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzconcreteflatwork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzconcreteflatwork.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad45745c-687c-5516-9f81-6fbaefe7d5f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzcons.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzcons.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8118560f-df6e-5311-9eb5-3b489088ed1e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzdoc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzdoc.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5788823c-5594-5e83-99ee-6ee4365a3599","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anze.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anze.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15bf6fe4-6c21-5f85-8eab-1c01e470365a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzebuilders.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzebuilders.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25821b33-ff8c-554a-a07d-fe23c6fcdd6e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzeigenkontoverify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzeigenkontoverify.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75d2a4da-2197-580e-a23f-afe576765377","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzeigenuberprufungsystem.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzeigenuberprufungsystem.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1729dfc-ac09-5134-bd3a-55c444e030f8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzeigeonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzeigeonline.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d95395e-5264-5470-af6b-ddad75dfbcfb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzeigergaggenaut.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzeigergaggenaut.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d26c1b7e-8984-5b21-a94d-0b6a5228f282","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzel.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzel.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcd2c36b-6dea-5b19-bc34-c3791b51f8ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzela.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzela.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80627a1b-e5f7-54af-a17c-45ce87d03783","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzelaandtaison.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzelaandtaison.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1724a1e-1796-581e-b3cd-af81a7a24e14","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzem-finance.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzem-finance.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--141c5b93-47b9-5e51-b43d-2675c271af4f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzen.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzen.digital']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fca1806-2871-5402-b377-7954b08b1df0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzenco.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzenco.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b63ddc9d-cb82-5451-9682-279969256a73","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzencomm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzencomm.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb77ff1c-3cf9-5b78-bf83-331c7d8a2c05","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzencommercial.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzencommercial.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b591a94c-ff0f-524c-8012-dba192a2e05e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzenfi.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzenfi.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df01dd17-43f4-5ee0-ac69-993f175019ed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzenfinup.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzenfinup.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91b353c8-c63b-526c-919e-d68e5948c833","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzenhub.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzenhub.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b2c3a5d-4280-5ed5-a05d-e305311b4420","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzenhub.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzenhub.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dceec9d4-90de-53e6-83ac-e78c5ffc4089","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzennow.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzennow.pro']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce180034-78b5-5fd1-b830-ac9e0992a0f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzenone.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzenone.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a83e056-8e6e-56a7-bdf4-4c52e68a3240","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzenretsu.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzenretsu.online']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd6cfd0c-abac-5650-8264-d20e4f90d466","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzens-fin.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzens-fin.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a86815c-0f83-5376-879e-c1f9880759df","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzens-finance.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzens-finance.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--560347eb-79f8-5b90-a83d-9fce55aa0de3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzentoplab.best","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzentoplab.best']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87a4ce75-6d17-5242-afff-107a760d6fb6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzenway.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzenway.one']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d98a764-8549-5a1d-a6f4-766c7a62b0d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzeright.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzeright.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71765eb3-edac-5f86-9dfe-d36504b0115d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzetain07hy.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzetain07hy.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c61b9939-e7c0-5274-b2e0-4e19fa351961","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzetain08hy.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzetain08hy.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8392001-0039-5df8-9501-6061929af5bd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzfss2025.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzfss2025.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09f41d10-87b6-5dee-a21e-8d58b0efa3b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzfxzb.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzfxzb.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17130ca8-37a1-5e93-9b5d-e0dbd2e1bbb9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzgeo2028.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzgeo2028.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f7a4270-e0c1-5f88-80de-a54fe3cfa5e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzha.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzha.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eff07038-4ab4-5a8c-9a66-e6199a44d8b4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzha.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzha.lol']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6bbb696-e6f7-5e35-8500-960e39edca47","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhalikastsiapanava.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhalikastsiapanava.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1685fda5-dc5b-5093-920f-24fa62eac287","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhangjiakou.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhangjiakou.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc4652d7-8361-554c-b7cf-544216e5c1bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhaomingli.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhaomingli.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ebe5a47-7ea0-5c30-a15d-d3484e2d0f2b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhelikamers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhelikamers.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62fd9b3d-e217-50c8-869d-e64975d99f52","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhelikayakimenko.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhelikayakimenko.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec5b8752-64e6-5218-b9c6-1bf1c16e98b7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhello.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhello.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dabdb3f5-289e-5eb1-a8a9-4e70b1a2002a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzheng-nas.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzheng-nas.top']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d1976f3-e528-5ef3-89f1-1863f812381f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhengyi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhengyi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49ac40bd-1a34-5588-827b-7ac595055a64","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzherosudzhensksm.date","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzherosudzhensksm.date']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--396cdc64-0036-5eed-89b3-1c9d6847a464","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhi.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhi.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cbd44bc-658e-5ae4-9e04-38ce9897a5d3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhi168.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhi168.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--587a1729-26a5-51c1-b320-4e549ac08801","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhichen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhichen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4114686-f831-56d0-a019-2ee61c788fc8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhidianzi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhidianzi.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb57085d-8c1d-5077-bad3-a93c9cf314ac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhishun.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhishun.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a59bd94-e4fa-521c-9f99-c345c2744ea3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhixiao.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhixiao.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--020f5d65-c4f2-52c4-a405-74de60e6c151","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhiyuer.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhiyuer.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d4ee379-feec-53e9-a74f-4c66bd093d86","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhomes-rewards.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhomes-rewards.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c86296fe-9dfa-54c5-89fc-9e01d34e7a09","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhongyunzn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhongyunzn.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bebc5bc7-bf81-5b6c-b10f-fa2447e663ed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhuinternational.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhuinternational.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02fd1bc5-29d1-5e2b-ba3e-c0f767781a13","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhuo52.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhuo52.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80407243-80dc-511c-be25-65d81aae9c63","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhuoapp.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhuoapp.cc']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--764535be-3b01-5b5c-b46b-354d65b2647b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhuohui.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhuohui.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a9a9667-3a76-5c77-91fd-e283c5dd82cc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhuojiasuqitizi.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhuojiasuqitizi.cc']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75b51c56-54c6-5d13-8b3c-37ba9f5a695c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhuojiasuqitizimianfei.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhuojiasuqitizimianfei.cc']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6350fde9-4a26-5db8-88fd-ca0042e176e4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhuoks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhuoks.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acef8b09-f7ac-51e4-834c-56591db6a076","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhuomeng.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhuomeng.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--268da359-defb-580a-a72f-a0b07bd6b5e3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhuomianfeijiasuqixiazai.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhuomianfeijiasuqixiazai.cc']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bd381b5-ce14-5922-af20-16195ac1b4b1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhuomiyou.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhuomiyou.top']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4321175a-6cb7-5305-b703-66bd0a122482","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhuoyuan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhuoyuan.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--676e66f9-0a77-5b49-ae54-a64041fb8d8c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhuozhou.beauty","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhuozhou.beauty']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a0bd82d-f0cd-546f-acd3-b261a2be723a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzhutech.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhutech.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b268628-47a1-52b8-bd24-24e196084110","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anziani.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anziani.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db322ebf-85a3-5eb9-a9f5-3b9f396057a8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzianidesigns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzianidesigns.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--680cb6e3-57bd-5dd8-9dbf-83b4a5201a70","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzianidev.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzianidev.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfd5f455-ba1e-544d-a260-f5b98f6f475e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzianimail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzianimail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--861397b8-6955-5d4b-94e8-cefcf7058afe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzianisolutions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzianisolutions.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a70146-2d03-52c1-a747-6726b88e8279","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzianitech.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzianitech.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80b8494e-ded4-5cb2-88a3-d2d04fbb4ded","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzid.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3e065da-8b41-584d-873a-0f1b45df557c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzidangao.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzidangao.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96ffdf2b-73b7-5a0b-bb94-6c1cd1752e5e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzii4.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzii4.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3321c3af-5f0a-5b43-8d39-35918654e1f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anziilo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anziilo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1a523a3-5e51-58a7-ae61-b7e1e46ec315","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzik.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzik.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22a584b3-a9c2-593e-aa31-f0da5fa570de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anziks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anziks.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b1ce860-dc63-5d66-a035-9833f44561a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzinvest.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzinvest.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b818c35e-36bf-5e27-a179-cf40b7a2a944","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzise.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1df3a08-4f0e-5e76-9d2a-5a6f3aec8ac4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzise1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzise1.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39d0adfd-4bad-5c73-981f-5a6114abeb8f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzise3.homes","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzise3.homes']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09db5aaa-de05-59ae-9ebe-f1c3b9d753d1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzise3.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzise3.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca73963c-7cdd-5966-9390-c98b5f49bea7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzise3.yachts","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzise3.yachts']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ee7a26b-17fb-59ed-910c-353f217f7a35","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzise4.bond","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzise4.bond']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27644491-7eff-5c19-8fdd-d1d7f0439150","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzise5.boats","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzise5.boats']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57f1a02d-80f9-5c07-847a-7d8d9e24be7d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzise5.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzise5.life']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b512745-4a22-55eb-97b2-9e48603af979","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzise6.homes","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzise6.homes']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74e87b50-a3ef-591f-a0a6-77c735ac917f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzise6.quest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzise6.quest']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55afcacd-4bb6-5b91-9443-141aa81dcd25","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzise6.yachts","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzise6.yachts']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--866fbf43-01af-5a14-878a-12380ee07ee4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzise7.fit","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzise7.fit']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc190ea1-1b7d-537d-89da-1ce16e71be8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzise7.homes","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzise7.homes']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15e4d460-a1c7-580d-8db8-ed06685e4174","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzise7.pics","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzise7.pics']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24fa6cb7-ce14-588e-9294-bb2e63853f8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzise8.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzise8.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4806c13-4922-53ee-93be-767ab821d79d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzise9.homes","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzise9.homes']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aa15398-1216-5ea2-a86f-970be58d48db","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzixiangdao.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzixiangdao.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d4bedc5-699f-5dfa-8ceb-1915956dde4b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzixin77.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzixin77.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c7e2278-d515-5a7b-a7e7-3d4a23245b8c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzixs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzixs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a277f63-7e6a-551f-9d49-696e3cdb79f7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anziyan.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anziyan.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a657e6fb-06fb-50fd-86c3-46039043db8c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anziyd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anziyd.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06fdb7b6-9c84-520e-bd3f-572e22167eac","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzj.bio","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzj.bio']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52a3cddd-5b5b-5d23-9d91-a69413511639","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzjx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzjx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--407ef961-9dd6-5bc9-9c5e-5dd482152e08","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzkz3.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzkz3.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfcc40b9-c53b-574a-8aa3-6369a1f653af","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzln.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzln.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47482f35-deb1-570e-9d2d-bdabd5e47fb0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzltds.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzltds.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d73b8a26-6621-5cea-89fe-0b0d7fccc7a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzmac.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzmac.info']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42960ed5-5de7-5bbf-860e-1217a14ee9f2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzmu.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzmu.link']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62567016-925b-59a3-ad5b-ebc724321dd9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzn23hzul.art","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzn23hzul.art']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec417335-33ad-5933-b1d1-e2e54da4f703","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzndfq5.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzndfq5.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b3cc0d5-743e-5c42-b610-66e30ff1cced","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anznewswire.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anznewswire.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc6162f0-3e2f-5c77-a853-3480bc0b58cd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzob.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzob.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2cf80c5-da82-5dff-b8f5-2c8cf236749a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzocraft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzocraft.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6672083-85cd-508b-b8b7-667b7e49325c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzoe0127.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzoe0127.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ec2a520-4c2d-58c7-b3ec-c5de7ffcefd5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzograph.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzograph.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da5eb738-9d4d-5264-976f-5881c0d0c441","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzojc.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzojc.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--defa59b2-68ba-572f-a294-80491d5faaa2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzoomislam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzoomislam.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9608b62b-9200-5f3d-9fac-afc5b45aa144","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzotrade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzotrade.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b95e784-079c-5e8f-872d-2bac3ea29dce","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzowomen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzowomen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e15c2f3d-9678-5f46-bcf7-6a426a0ed99d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzpers.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzpers.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c8f1a7-8e1b-5265-8a43-ad4864b80e76","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzplanners.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzplanners.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6539a132-0812-5bc5-afbf-638c3e9dd8eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzplusa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzplusa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--403612a5-9c8f-5455-84e5-e32a4e98f838","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzpost-ie.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzpost-ie.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--778b3b03-0ff0-5ff7-a6f9-9c9592f7eec7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzrad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzrad.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32bc62e9-5035-5927-9db1-c47e6386c0f9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzrewards-home.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzrewards-home.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--628ca7c3-4c15-5ead-b8cb-5076296347ee","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzrwardprogram.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzrwardprogram.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50f56e25-c2fa-51a6-8ac4-c15726f851e9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anztshirt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anztshirt.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e235b855-dac4-5b82-8edc-3ed4da598f9c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anztsl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anztsl.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d16e61b-e35b-5fdf-a344-9784c269aa83","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anztsq2icm.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anztsq2icm.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f436e217-52d7-59bd-ad55-a45e62ffd4de","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzu-tosa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzu-tosa.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50e35b1b-b47c-57bd-baba-28b892b0709c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzu.moe","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzu.moe']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c564f667-0281-56b4-8602-60f18a2596d7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzueta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzueta.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2284fe38-8276-5995-9f5f-d6f9a9e7962f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzug.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzug.today']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a35a55e5-410c-5007-9e9f-e306f4ca6675","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzugkaufen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzugkaufen.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18fc27da-d976-5fc9-af9c-5fd544890aed","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzuov.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzuov.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2eb284c-1507-5a72-91ff-0aae9c9beae9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzurstobart.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzurstobart.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3d4df1d-b9bd-5f39-8ec9-14b67a0ebc93","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzusong.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzusong.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39890f0b-18d0-52c2-8389-fb5bc494988b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzusongs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzusongs.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b45571c-e4e8-5cec-abbe-b988d8c4275a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzutresgene.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzutresgene.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78f1ddd1-1207-55b8-9ba3-2895c7c569ca","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzuxiun.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzuxiun.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa12bdad-1138-5ff1-9cd8-859c38a870bb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzuz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzuz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee7b4ef8-83fb-5531-a47d-2416cbc11afb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzverifyid.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzverifyid.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee320d32-922e-5970-b3d0-287d312d67bb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzvip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzvip.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97387d63-67ea-5619-8da6-d4964c0d0860","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzvip.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzvip.net']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50b8eadd-0e1e-556c-a1a6-292a4c482003","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzwardsprogram.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzwardsprogram.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1760ccf-c64f-5999-8399-46f4195ce371","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzwardsprogram.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzwardsprogram.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab16f070-fa07-5bbe-b485-32dca7a1a3a4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzwardsprograms.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzwardsprograms.click']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--402b056e-8184-5fb1-bf8c-208cb4fc1196","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzwardsprograms.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzwardsprograms.help']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70d588ec-0435-55db-ae3e-5a2c8a09519e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzwgu.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzwgu.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a9d6b67-8ab6-5551-aa7c-069fc62b8787","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzwire.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzwire.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a44ed3a1-fc16-51a2-bc96-1d5a093ee62e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzworldline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzworldline.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d94bc7d-f98e-52db-98cf-f2009c43fb22","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzworldwide.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzworldwide.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44332a45-82a1-5b79-88d8-61afe507a5f3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzx53.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzx53.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44883fe4-745a-5b0a-af7e-2a73d71ae6fe","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzxncyz.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzxncyz.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a25ff40-f14a-5533-99e5-cd603ebe3cf4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzxsw.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzxsw.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99cf5b78-84d1-5a07-92c8-b72edb25ad57","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzxvb.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzxvb.mom']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b708fcf-dfab-54fc-bf5f-f0e790a628b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzyorm.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzyorm.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce5e65af-e8f1-51bc-aeff-49f1e750d86e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: anzzq.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzzq.xyz']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--580fa629-8e6a-5304-8ac1-72068ca23a5d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aoafarms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aoafarms.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9109983f-1151-52af-93c4-20181e64d318","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aoanz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aoanz.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f082b294-8779-5899-970b-6b178b62ce7e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aoanzw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aoanzw.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4fe1bea-ded4-57e3-90ac-294e7e80f36f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aobofasteners.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aobofasteners.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c480cf5f-1190-57f6-988d-a3ee65559a2b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aobonkin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aobonkin.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6086808-9cac-5775-be8e-867e19f3db53","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aoisecuredrive.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aoisecuredrive.sbs']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ac64aa2-4b9c-5422-bee7-c75409557e38","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aokvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aokvault.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--904d0ab8-ae74-5d1f-84b4-79dcc649ab91","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aoldshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aoldshop.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72251b87-dae1-5586-a32e-b9576a4c31a2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aolhelpbase.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aolhelpbase.org']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33d02843-cacb-50e1-bdb2-519a1f8b11fd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aolupdate.blog","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aolupdate.blog']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd0cac5c-d871-5218-8993-d12f6d81f68c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aomailodiuywthupdatemailakdju.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aomailodiuywthupdatemailakdju.icu']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e7a6201-148b-5e79-9c0c-137bb264fc51","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aominablog.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aominablog.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cdd58c7-9c1e-5da5-94ec-f4472baedea5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aoneelectronicsbd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aoneelectronicsbd.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81e24c04-5087-5f24-b933-6774fb6e3122","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aosuix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aosuix.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4729b138-1d74-59b4-a195-aa427f2406c7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aowassana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aowassana.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f8eca01-1ef7-5235-b720-712cd41ad535","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aoyanz.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aoyanz.cfd']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a5c1c01-6476-52fc-a477-396aea242ed2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Malicious domain: aozoracafe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aozoracafe.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7fe3291-3864-5793-9605-f2f0b747f5c2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 188.114.96.3 (282502 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '188.114.96.3']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9b0a1f-ea79-531b-a9df-a76cce0d67e0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 188.114.97.3 (282095 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '188.114.97.3']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b62c34e-58be-5925-b7ee-133a5f4f2297","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 162.4.84.247 (178152 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '162.4.84.247']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6b66785-c804-5c05-919e-b068fbf846a6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 91.195.240.123 (146911 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '91.195.240.123']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4557b118-7184-5e9f-a43a-270869d66259","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 64.190.63.222 (48469 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '64.190.63.222']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4545dc2-0836-5d34-be66-90d3745cc7dd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 172.232.24.161 (26230 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '172.232.24.161']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62a54126-71f2-51da-be53-568b8920c32c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 76.223.54.146 (25813 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '76.223.54.146']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23dd6711-2c26-55f7-b5a1-ffa8a60e716f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 172.232.24.235 (25756 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '172.232.24.235']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5534d19d-8022-5ae6-bf38-8bffce674a7a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 172.234.25.42 (25670 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '172.234.25.42']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7ee88f8-c0d3-5ba1-a9a1-ed88e0d8d23a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 13.248.169.48 (17442 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '13.248.169.48']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69578ecb-93dc-5767-aa6c-7f21b7705c78","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 23.227.38.65 (15526 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '23.227.38.65']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b4c977e-c23a-56c3-b804-0bbc8e3c362c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 188.114.97.9 (10241 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '188.114.97.9']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc05f3cf-b02d-5b70-aabc-93798a55e0fc","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 188.114.96.9 (10235 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '188.114.96.9']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b92f7b19-abcd-505b-b767-fc503aa0a80c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 35.241.104.166 (7168 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '35.241.104.166']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31772979-3b9a-5571-b8b1-8e7f77c0d1ba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 35.204.150.5 (7064 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '35.204.150.5']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d580bd8b-ad4a-5176-b521-73495c23545d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 207.246.78.75 (6761 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '207.246.78.75']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b87f4d49-7e99-5382-be54-ce03e8e98e76","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 172.66.144.96 (6363 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '172.66.144.96']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecc75531-d7a2-56b4-886b-3de88719a4e8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 45.77.92.157 (6325 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '45.77.92.157']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aed06cb8-c549-52d4-9d74-8a4cf1572348","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 104.20.41.38 (5798 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '104.20.41.38']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10f67020-d887-588c-9ba4-ab3baf5aac4d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 104.18.17.52 (5759 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '104.18.17.52']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2859a203-80f0-5e0f-94a9-503f507d9d0e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 104.18.16.52 (5580 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '104.18.16.52']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3dd00d6-36f7-5136-bc0c-c404e1f67312","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 168.235.88.209 (5153 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '168.235.88.209']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f840b58-16d1-53bb-8111-8128bca1aea1","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 107.161.23.204 (5131 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '107.161.23.204']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f1ea543-8a97-59fd-a90b-34927b17e46a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 198.251.84.92 (5033 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '198.251.84.92']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea02ad2f-d062-51b3-858c-226e4cb42984","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 184.94.219.102 (4989 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '184.94.219.102']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46188870-e104-5544-a888-864ca083eb61","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 204.188.203.154 (4967 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '204.188.203.154']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--822dbd8c-8957-5399-8f3d-251b9212ee3d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 45.58.190.82 (4962 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '45.58.190.82']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bb1fb23-6d70-5542-9876-1a35cdd1d919","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 184.94.210.36 (4842 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '184.94.210.36']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0da0895a-b61a-5fea-9eee-225d9a706e9f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 149.104.32.138 (4830 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '149.104.32.138']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df1012aa-9514-5280-bee0-6501f7562a12","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 91.195.240.12 (4318 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '91.195.240.12']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca8f7107-927b-5381-9e77-861601b91866","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 149.104.32.141 (4265 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '149.104.32.141']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a365152c-89e5-5869-bbce-0db0cd619991","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 208.122.194.33 (4261 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '208.122.194.33']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--877b106c-5862-5ced-b051-a3b83ba6961b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 38.182.168.156 (4192 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '38.182.168.156']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e747572-439a-5fa1-a001-8fb75f2dff31","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 38.14.176.138 (4058 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '38.14.176.138']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b13b48ac-1cb0-53c4-a3e3-b509b8902374","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 38.14.176.137 (4002 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '38.14.176.137']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60507310-f851-5ad9-8f89-59789d734d74","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 209.141.38.71 (3898 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '209.141.38.71']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1de77803-2ea3-51bc-952a-4086c885b149","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 198.251.81.30 (3794 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '198.251.81.30']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faf0cbe4-94f5-545d-922b-e00e2a6876bb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 149.104.32.140 (3579 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '149.104.32.140']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09f2225e-87d3-5232-912c-62d227eb311f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 89.124.75.150 (3406 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '89.124.75.150']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82d44ffd-e2e4-5d75-85fb-e00f63d3daa6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 148.66.157.235 (3349 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '148.66.157.235']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2944c0d8-9d9e-542a-8ef5-59c043c24c5a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 216.198.79.1 (3317 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '216.198.79.1']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0aaa17a-816e-5b51-bab4-6d1beb8fa78b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 23.224.10.178 (3311 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '23.224.10.178']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15598242-7d23-591e-86ef-7067a68f8ef6","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 23.224.10.180 (3299 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '23.224.10.180']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5ee8c2e-7c2d-5acc-9590-693b6679a098","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 23.224.10.179 (3298 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '23.224.10.179']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99c2266c-2e25-5348-bba6-026d4cf7d5a3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 23.224.10.181 (3296 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '23.224.10.181']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c781268-ee55-5d9e-babf-ffc1b28bbce5","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 23.224.10.182 (3284 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '23.224.10.182']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bfca614-22fc-52b3-a338-b91b50e25b0f","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 220.158.235.210 (3242 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '220.158.235.210']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d631e17b-866c-56e9-91b5-e0d9f681cb2d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 151.246.1.105 (3105 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '151.246.1.105']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4718a99d-2f6e-57ef-a4da-2d3752125e10","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 185.158.133.1 (3048 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '185.158.133.1']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc5ce5fd-44b3-5c23-8a9e-66d2eff628b4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Shared hosting IP: 198.202.211.1 (2994 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '198.202.211.1']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22a84eb1-0e3f-5b9a-8b95-0934abeeabc7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: chihan@mail.com (10910 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'chihan@mail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--679b4cbe-46db-5aa6-a76b-df5c4118f3a3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: dizhi@992fun.com (9268 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'dizhi@992fun.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--578f641b-91d7-5267-adea-85031b860ba0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: dizhi@ncao18.com (5648 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'dizhi@ncao18.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f75c05e0-a741-5912-add2-3bc8cbfc39d8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: support@webador.com (4460 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@webador.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0cb7ac2-6500-5940-8d93-5dd779e65436","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: service@atom.com (3079 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'service@atom.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73e4e170-eae2-5fec-92f1-4cdca3f732be","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: support@trackingspaces.com (2546 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@trackingspaces.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6fc7d04-a5d9-58d5-8bf3-6e33bbc8eb61","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: 992kanpian@gmail.com (2437 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = '992kanpian@gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c75f84cf-0d23-5795-9170-ebf6a63cc057","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: dedenf@gmail.com (2117 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'dedenf@gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ee5bf6c-fab4-5363-964a-66fff4540414","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: service@trackorderzone.com (2102 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'service@trackorderzone.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9af69866-fef6-5ab3-82a5-b32235df82f0","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: dizhi@91jqx.com (1945 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'dizhi@91jqx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ecc1196-4df0-5743-a0f8-8d5734058e63","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: service@orderfollow.live (1475 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'service@orderfollow.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f79fba73-9ffd-5970-adc7-908961ad16b9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: service@orderlookup.live (1416 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'service@orderlookup.live']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a4258b0-2226-5bad-b74d-e1fbae906783","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: support@boardmentor.study (1320 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@boardmentor.study']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93ca6665-2636-5791-a355-26a482683ecd","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: dele-tv@protonmail.com (1243 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'dele-tv@protonmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4fa2810-f9da-5918-bd40-b7d4e9e6564c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: 5x5xdizhi@gmail.com (1098 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = '5x5xdizhi@gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee40aceb-1d5f-5112-b4c3-ca17ecf5c941","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: hello@name.si (967 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'hello@name.si']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f984de37-f6d8-588a-ae55-d0f01d9890bf","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: support@webador.fr (730 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@webador.fr']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e109f44-bd95-5856-9d35-ce7a2503b64e","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: support@eclipsebroadband.co.uk (724 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@eclipsebroadband.co.uk']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b32ba52-a52b-54f8-b506-a2b45a89ca3a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: contact@oneclickname.com (620 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'contact@oneclickname.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53fafa9f-374f-5052-bf97-48a0f1fb9397","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: support@7slots.casino (598 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@7slots.casino']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35ff502e-1495-525a-8c1b-3a5135553ec7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: soporte@webador.es (591 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'soporte@webador.es']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f15607bc-7a75-5582-bede-652bd3025a04","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: lvmaodizhi@gmail.com (536 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'lvmaodizhi@gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca77768-b7b0-5e46-95f6-5c13eac98d8a","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: service@myorderstracking.com (516 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'service@myorderstracking.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c35be78-d925-5ab5-9d52-2aa98a85502b","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: 91cg@pm.me (451 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = '91cg@pm.me']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b46e0d5-f5f5-5b76-818a-f0a7702d21eb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: support@jouwweb.nl (430 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@jouwweb.nl']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8351ce70-5f1a-5e2a-b77e-cfa5d3be7dfb","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: support@pornhub.com (387 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@pornhub.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00029931-3ae6-578a-8716-af52ffff952c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: support@pornhubpremium.com (387 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@pornhubpremium.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3f09739-4b36-5e07-a362-ef165a0a2b01","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: support@webador.de (360 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@webador.de']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccd60042-9425-5525-9e5d-9b0d754c54e7","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: nvyoutv991@gmail.com (354 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'nvyoutv991@gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8df6381-06a7-587c-8f80-3d67d7c9efb3","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: fernando@revenueflow.com (329 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'fernando@revenueflow.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c0e87b1-cf3b-5e3e-9b9e-7695ec5cff52","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: donate@opencart.com (313 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'donate@opencart.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99ac41ac-cb93-5910-8f55-a913b1bca176","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: jack@greensock.com (293 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'jack@greensock.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b24cb14-dfc3-50c1-aedc-9fbffd1f5f61","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: support@domainagents.com (282 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@domainagents.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf3c5ff8-9fae-5434-895b-b62b9429c985","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: assistenza@webador.it (281 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'assistenza@webador.it']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--798e568f-77fe-5840-a23e-929026f602b2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: info@nextradx.com (280 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'info@nextradx.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2dbb2c2-1052-5b75-ba23-f8171afc8820","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: support@payfect.com (255 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@payfect.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fda3ff5d-6b94-5892-9048-c0ddcd18cfc8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: support@hostseo.com (250 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@hostseo.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3287b6c8-cea8-527b-bc46-3b6d28ce4f98","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: turkifsaclub@proton.me (240 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'turkifsaclub@proton.me']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a958ad-48f2-5344-bec4-ec8d05050fd4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: hello@a314.com (230 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'hello@a314.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a2eebff-6ed5-5f95-990f-dbceab058b39","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: amdc6766@gmail.com (224 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'amdc6766@gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ed675fd-24d3-5bee-9c21-777bbeb3f09d","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: 18yiren@gmail.com (217 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = '18yiren@gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a5653ad-0c15-5fe9-81f1-4b6a7f9e60ba","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: langyoushipin@gmail.com (205 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'langyoushipin@gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--240e62ad-e3d3-56a3-83a0-2475cf3a7796","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: support@7k.casino (203 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@7k.casino']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ed48f0e-8676-586c-ac50-34af43966c54","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: caishenfei718@gmail.com (190 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'caishenfei718@gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cb89949-4fed-5f60-9d46-a670bf16aeb4","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: rexodigitalsolutions@gmail.com (164 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'rexodigitalsolutions@gmail.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--691265d8-ff9a-5ece-b954-33f9b12ec0c9","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: info@expansio.io (164 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'info@expansio.io']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e068b4f0-ac95-539f-9153-124e3b3e5133","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: hh88nb2c@proton.me (163 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'hh88nb2c@proton.me']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dda225a9-1a1b-525f-8935-975c582f9fa2","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: info@japanstockresearch.jp (163 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'info@japanstockresearch.jp']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--500d44ca-cd23-5d64-8072-6ed289b52d6c","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: don@donendriss.com (157 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'don@donendriss.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ec338ab-83ae-5805-a52e-df9b39228ec8","created":"2026-11-06T00:00:00.000Z","modified":"2026-11-06T00:00:00.000Z","created_by_ref":"identity--f913b53b-2ca2-514b-bd69-34b8c3d37f00","name":"Serial registrant: apps@bagelcode.com (139 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'apps@bagelcode.com']","pattern_type":"stix","valid_from":"2026-11-06T00:00:00.000Z","labels":["serial-registrant","attribution"]}]}